|
cve-2026-96655
|
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresse... |
MEDIUM
|
5.3
|
1.64%
|
cvelistv5 |
2026-10-21 |
|
cve-2026-96654
|
Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an a... |
MEDIUM
|
6.9
|
1.95%
|
cvelistv5 |
2026-10-21 |
|
cve-2026-96652
|
Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline' |
MEDIUM
|
5.3
|
1.82%
|
cvelistv5 |
2026-10-21 |
|
cve-2026-93579
|
A flaw was found in Netty's HTTP/2 stack |
MEDIUM
|
6.5
|
0.90%
|
cvelistv5 |
2026-11-04 |
|
cve-2026-93578
|
io.netty/netty-handler-ssl-ocsp: Netty: Missing Extended Key Usage (EKU) check in OCSP Client allows certificate revocation bypass |
MEDIUM
|
5.9
|
0.23%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93576
|
io.netty/netty-codec-smtp: Netty netty-codec-smtp — SMTP command-name field is not CRLF-validated (incomplete fix of CVE-2025-59419) |
HIGH
|
7.5
|
0.27%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93575
|
SUSE CVE CVE-2026-93575 |
UNKNOWN
|
N/A
|
0.39%
|
cvelistv5 |
2026-09-19 |
|
cve-2026-93574
|
A flaw was found in Netty's `netty-codec-http` component |
MEDIUM
|
6.5
|
1.35%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-93573
|
A flaw was found in Netty's HTTP/1.1 decoder |
MEDIUM
|
6.5
|
0.90%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-93572
|
io.netty/netty-codec-redis: Netty: RedisArrayAggregator nested RESP headers multiply patched preallocation limits |
HIGH
|
7.5
|
0.34%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93569
|
A flaw was found in Netty |
HIGH
|
8.2
|
2.19%
|
cvelistv5 |
2026-11-04 |
|
cve-2026-93568
|
A flaw was found in Netty |
HIGH
|
7.5
|
0.95%
|
cvelistv5 |
2026-11-04 |
|
cve-2026-93567
|
A flaw was found in Netty's HTTP/2 codec |
HIGH
|
7.5
|
2.56%
|
cvelistv5 |
2026-11-04 |
|
cve-2026-93566
|
A flaw was found in Netty |
MEDIUM
|
6.5
|
0.48%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-93565
|
A flaw was found in Netty RtspDecoder |
HIGH
|
7.5
|
0.77%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-93564
|
A flaw was found in Netty |
HIGH
|
7.5
|
0.94%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-93563
|
io.netty/netty-codec-smtp: Netty: Unbounded multi-line response accumulation in SmtpResponseDecoder leads to memory-exhaustion DoS |
HIGH
|
7.5
|
0.33%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93561
|
io.netty/netty-codec-memcache: Netty: Memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling |
MEDIUM
|
6.5
|
0.18%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93560
|
io.netty/netty-codec-stomp: Netty: STOMP codec content-length long-to-int truncation causes infinite decode loop DoS |
HIGH
|
7.5
|
0.41%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93494
|
io.netty/netty-codec-stomp: Netty: ByteBuf Leak in StompSubframeDecoder When a Frame Body Is Never Terminated |
HIGH
|
7.5
|
0.41%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93493
|
io.netty/netty-handler-ssl-ocsp: Netty: OCSP Validation Silently Skipped When a Response Omits the Optional nextUpdate Field |
MEDIUM
|
5.9
|
0.22%
|
cvelistv5 |
2026-09-18 |
|
cve-2026-93492
|
A flaw was found in Netty's HTTP/2 HpackEncoder |
MEDIUM
|
5.3
|
0.37%
|
cvelistv5 |
2026-11-04 |
|
cve-2026-91863
|
org.apache.neethi/neethi: Apache Neethi: Denial of Service via uncontrolled recursion in WS-Policy document parsing |
HIGH
|
7.5
|
0.76%
|
cvelistv5 |
2026-10-16 |
|
cve-2026-91777
|
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion |
HIGH
|
7.5
|
0.49%
|
cvelistv5 |
2026-10-19 |
|
cve-2026-91776
|
jackson-databind: com.fasterxml.jackson/jackson-core: jackson-databind: Denial of Service via unbounded cache growth in TypeDeserializerBase |
HIGH
|
7.5
|
0.49%
|
cvelistv5 |
2026-10-15 |
|
cve-2026-91668
|
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
HIGH
|
8.8
|
0.25%
|
cvelistv5 |
2026-11-03 |
|
cve-2026-91665
|
Vulnerability in Oracle Essbase (component: Security) |
CRITICAL
|
9.8
|
0.47%
|
cvelistv5 |
2026-10-22 |
|
cve-2026-91664
|
Vulnerability in Oracle Essbase (component: Security) |
HIGH
|
7.5
|
0.29%
|
cvelistv5 |
2026-10-23 |
|
cve-2026-91663
|
Vulnerability in Oracle Essbase (component: Security) |
CRITICAL
|
9.9
|
0.34%
|
cvelistv5 |
2026-10-23 |
|
cve-2026-91662
|
Vulnerability in Oracle Essbase (component: Java Based Agent) |
MEDIUM
|
6.4
|
0.10%
|
cvelistv5 |
2026-10-27 |
ndaal KEV