|
cve-2026-52722
|
SUSE CVE CVE-2026-52722 |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-08-03 |
|
cve-2026-52720
|
gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-08-03 |
|
cve-2026-52719
|
gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-07-30 |
|
cve-2026-52718
|
gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tile_list_obu parser byte/bit confusion |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-07-30 |
|
cve-2026-5201
|
gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-5194
|
wolfSSL: wolfSSL: Reduced security of ECDSA authentication via missing digest size checks |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-06-28 |
|
cve-2026-5172
|
dnsmasq: extract_addresses() OOB read via malformed rdlen |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-5119
|
SUSE CVE CVE-2026-5119 |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-50292
|
SUSE CVE CVE-2026-50292 |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-10 |
|
cve-2026-50031
|
freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-05 |
|
cve-2026-49759
|
erlang: Erlang OTP: Denial of Service via crafted SCTP ERROR chunk |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-48937
|
nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-08-18 |
|
cve-2026-48935
|
nodejs: Node.js: Unauthorized file metadata modification |
LOW
|
3.3
|
N/A
|
cvelistv5 |
2026-07-21 |
|
cve-2026-48934
|
nodejs: Node.js: Certification validation bypass in TLS host verification |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-07-20 |
|
cve-2026-48933
|
SUSE CVE CVE-2026-48933 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2026-48931
|
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance |
LOW
|
3.7
|
N/A
|
cvelistv5 |
2026-08-13 |
|
cve-2026-48930
|
nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling |
MEDIUM
|
5.6
|
N/A
|
cvelistv5 |
2026-08-10 |
|
cve-2026-4893
|
dnsmasq: Broken ECS source validation bypass |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-48928
|
Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency |
MEDIUM
|
4.2
|
N/A
|
cvelistv5 |
2026-07-20 |
|
cve-2026-4892
|
dnsmasq: DHCPv6 CLID buffer overflow in helper process |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-48914
|
SUSE CVE CVE-2026-48914 |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-4891
|
SUSE CVE CVE-2026-4891 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-4890
|
dnsmasq: NSEC bitmap parsing infinite loop |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-48864
|
A flaw was found in libsolv |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-09-17 |
|
cve-2026-48860
|
SUSE CVE CVE-2026-48860 |
HIGH
|
8.0
|
N/A
|
cvelistv5 |
2026-08-27 |
|
cve-2026-48858
|
erlang: erlang-inets: erlang-ftp: Erlang/OTP ftp: Server-Side Request Forgery (SSRF) via unvalidated PASV response IP address |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-06-27 |
|
cve-2026-4878
|
A flaw was found in libcap |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2026-09-09 |
|
cve-2026-48619
|
SUSE CVE CVE-2026-48619 |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2026-48618
|
nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch |
HIGH
|
7.7
|
N/A
|
cvelistv5 |
2026-08-10 |
|
cve-2026-48617
|
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation |
LOW
|
2.9
|
N/A
|
cvelistv5 |
2026-08-19 |
ndaal KEV