|
cve-2026-42945
|
nginx: NGINX: Arbitrary Code Execution Vulnerability |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-42790
|
erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing |
HIGH
|
7.4
|
N/A
|
cvelistv5 |
2026-08-14 |
|
cve-2026-42789
|
erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation |
HIGH
|
8.0
|
N/A
|
cvelistv5 |
2026-08-14 |
|
cve-2026-4271
|
libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-08-18 |
|
cve-2026-42618
|
SUSE CVE CVE-2026-42618 |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-42617
|
SUSE CVE CVE-2026-42617 |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-42616
|
SUSE CVE CVE-2026-42616 |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-42534
|
unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-42508
|
SUSE CVE CVE-2026-42508 |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-42498
|
tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-26 |
|
cve-2026-42338
|
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-42258
|
ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-42246
|
net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS |
HIGH
|
7.4
|
N/A
|
cvelistv5 |
2026-08-21 |
|
cve-2026-42245
|
ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-17 |
|
cve-2026-42218
|
SUSE CVE CVE-2026-42218 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-08-21 |
|
cve-2026-42216
|
SUSE CVE CVE-2026-42216 |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-42154
|
SUSE CVE CVE-2026-42154 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-42151
|
SUSE CVE CVE-2026-42151 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-42055
|
nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-08-25 |
|
cve-2026-41676
|
SUSE CVE CVE-2026-41676 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-41651
|
SUSE CVE CVE-2026-41651 |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-41521
|
xrdp: integer overflow leads to out-of-bounds read in vnc-any mode |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-07-21 |
|
cve-2026-41411
|
vim: Vim: Command injection allows arbitrary code execution via malicious tag files |
HIGH
|
7.3
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-41316
|
erb: ERB: Arbitrary code execution via deserialization bypass |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-08-21 |
|
cve-2026-41293
|
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated |
HIGH
|
7.3
|
N/A
|
cvelistv5 |
2026-08-24 |
|
cve-2026-41292
|
unbound: Unbound: Denial of Service via excessive EDNS options |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-41284
|
tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-07-30 |
|
cve-2026-41252
|
xrdp: heap-based buffer overflow in vnc-any mode |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-08-04 |
|
cve-2026-41142
|
OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-07-13 |
|
cve-2026-40898
|
github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-04 |
ndaal KEV