|
cve-2026-40683
|
OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling |
HIGH
|
7.7
|
N/A
|
cvelistv5 |
2026-08-07 |
|
cve-2026-40622
|
unbound: Unbound: Cache manipulation via 'ghost domain names' attack |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-4046
|
glibc: glibc: Denial of Service via iconv() function with specific character sets |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-04 |
|
cve-2026-40393
|
SUSE CVE CVE-2026-40393 |
MEDIUM
|
6.8
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-40386
|
SUSE CVE CVE-2026-40386 |
MEDIUM
|
4.4
|
N/A
|
cvelistv5 |
2026-07-11 |
|
cve-2026-40385
|
SUSE CVE CVE-2026-40385 |
MEDIUM
|
4.4
|
N/A
|
cvelistv5 |
2026-07-11 |
|
cve-2026-40356
|
krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-40355
|
SUSE CVE CVE-2026-40355 |
MEDIUM
|
5.9
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-40170
|
ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-06-30 |
|
cve-2026-40164
|
jq: jq: Denial of Service via crafted JSON object causing hash collisions |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-40023
|
SUSE CVE CVE-2026-40023 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-04-22 |
|
cve-2026-39979
|
jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-07-09 |
|
cve-2026-39835
|
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could b... |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
2026-09-18 |
|
cve-2026-39832
|
When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not seria... |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-09-15 |
|
cve-2026-39830
|
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connect... |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-39829
|
The RSA and DSA public key parsers did not enforce size limits on key parameters |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-39828
|
SUSE CVE CVE-2026-39828 |
HIGH
|
8.1
|
N/A
|
cvelistv5 |
2026-09-16 |
|
cve-2026-39822
|
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the f... |
HIGH
|
7.8
|
N/A
|
cvelistv5 |
2026-09-17 |
|
cve-2026-39821
|
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label |
CRITICAL
|
9.6
|
N/A
|
cvelistv5 |
2026-09-17 |
|
cve-2026-37555
|
SUSE CVE CVE-2026-37555 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-36849
|
SUSE CVE CVE-2026-36849 |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-35469
|
spdystream is a Go library for multiplexing streams over SPDY connections |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2026-09-11 |
|
cve-2026-35177
|
vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass |
MEDIUM
|
4.1
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-35092
|
SUSE CVE CVE-2026-35092 |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-35091
|
SUSE CVE CVE-2026-35091 |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-34980
|
SUSE CVE CVE-2026-34980 |
MEDIUM
|
6.4
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-34881
|
openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2026-08-14 |
|
cve-2026-34079
|
flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation |
MEDIUM
|
6.7
|
N/A
|
cvelistv5 |
2026-07-06 |
|
cve-2026-34078
|
SUSE CVE CVE-2026-34078 |
HIGH
|
8.2
|
N/A
|
cvelistv5 |
2026-06-25 |
|
cve-2026-33816
|
Memory-safety vulnerability in github.com/jackc/pgx/v5. |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-10 |
ndaal KEV