Search CVE reports


Toggle filters

901 – 910 of 36525 results

Status is adjusted based on your filters.


CVE-2026-8449

Medium priority
Ignored

Rejected reason: This CVE ID has been rejected or withdrawn.

157 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 24.04 LTS
linux Not affected
linux-hwe Not in release
linux-hwe-5.4 Not in release
linux-hwe-5.8 Not in release
linux-hwe-5.11 Not in release
linux-hwe-5.13 Not in release
linux-hwe-5.15 Not in release
linux-hwe-5.19 Not in release
linux-hwe-6.2 Not in release
linux-hwe-6.5 Not in release
linux-hwe-6.8 Not in release
linux-hwe-6.11 Ignored
linux-hwe-6.14 Ignored
linux-hwe-6.17 Not affected
linux-hwe-edge Not in release
linux-lts-xenial Not in release
linux-kvm Not in release
linux-allwinner-5.19 Not in release
linux-aws Not affected
linux-aws-5.0 Not in release
linux-aws-5.3 Not in release
linux-aws-5.4 Not in release
linux-aws-5.8 Not in release
linux-aws-5.11 Not in release
linux-aws-5.13 Not in release
linux-aws-5.15 Not in release
linux-aws-5.19 Not in release
linux-aws-6.2 Not in release
linux-aws-6.5 Not in release
linux-aws-6.8 Not in release
linux-aws-6.14 Ignored
linux-aws-6.17 Not affected
linux-aws-hwe Not in release
linux-azure Not affected
linux-azure-4.15 Not in release
linux-azure-5.3 Not in release
linux-azure-5.4 Not in release
linux-azure-5.8 Not in release
linux-azure-5.11 Not in release
linux-azure-5.13 Not in release
linux-azure-5.15 Not in release
linux-azure-5.19 Not in release
linux-azure-6.2 Not in release
linux-azure-6.5 Not in release
linux-azure-6.8 Not in release
linux-azure-6.11 Ignored
linux-azure-6.14 Not affected
linux-azure-6.17 Not affected
linux-azure-fde Not affected
linux-azure-fde-5.15 Not in release
linux-azure-fde-5.19 Not in release
linux-azure-fde-6.2 Not in release
linux-azure-fde-6.8 Not in release
linux-azure-fde-6.14 Not affected
linux-azure-fde-6.17 Not affected
linux-azure-nvidia Not affected
linux-azure-nvidia-6.14 Not affected
linux-bluefield Not in release
linux-azure-edge Not in release
linux-fips Not affected
linux-aws-fips Not affected
linux-azure-fips Not affected
linux-gcp-fips Not affected
linux-gcp Not affected
linux-gcp-4.15 Not in release
linux-gcp-5.3 Not in release
linux-gcp-5.4 Not in release
linux-gcp-5.8 Not in release
linux-gcp-5.11 Not in release
linux-gcp-5.13 Not in release
linux-gcp-5.15 Not in release
linux-gcp-5.19 Not in release
linux-gcp-6.2 Not in release
linux-gcp-6.5 Not in release
linux-gcp-6.8 Not in release
linux-gcp-6.11 Ignored
linux-gcp-6.14 Ignored
linux-gcp-6.17 Not affected
linux-gke Not affected
linux-gke-4.15 Not in release
linux-gke-5.4 Not in release
linux-gke-5.15 Not in release
linux-gkeop Not affected
linux-gkeop-5.4 Not in release
linux-gkeop-5.15 Not in release
linux-ibm Not affected
linux-ibm-5.4 Not in release
linux-ibm-5.15 Not in release
linux-ibm-6.8 Not in release
linux-intel-5.13 Not in release
linux-intel-iotg Not in release
linux-intel-iotg-5.15 Not in release
linux-iot Not in release
linux-intel-iot-realtime Not in release
linux-lowlatency Not affected
linux-lowlatency-hwe-5.15 Not in release
linux-lowlatency-hwe-5.19 Not in release
linux-lowlatency-hwe-6.2 Not in release
linux-lowlatency-hwe-6.5 Not in release
linux-lowlatency-hwe-6.8 Not in release
linux-lowlatency-hwe-6.11 Ignored
linux-nvidia Not affected
linux-nvidia-6.2 Not in release
linux-nvidia-6.5 Not in release
linux-nvidia-6.8 Not in release
linux-nvidia-6.11 Ignored
linux-nvidia-lowlatency Not affected
linux-nvidia-tegra Not affected
linux-nvidia-tegra-5.15 Not in release
linux-nvidia-tegra-igx Not in release
linux-oracle Not affected
linux-oracle-5.0 Not in release
linux-oracle-5.3 Not in release
linux-oracle-5.4 Not in release
linux-oracle-5.8 Not in release
linux-oracle-5.11 Not in release
linux-oracle-5.13 Not in release
linux-oracle-5.15 Not in release
linux-oracle-6.5 Not in release
linux-oracle-6.8 Not in release
linux-oracle-6.14 Ignored
linux-oracle-6.17 Not affected
linux-oem Not in release
linux-oem-5.6 Not in release
linux-oem-5.10 Not in release
linux-oem-5.13 Not in release
linux-oem-5.14 Not in release
linux-oem-5.17 Not in release
linux-oem-6.0 Not in release
linux-oem-6.1 Not in release
linux-oem-6.5 Not in release
linux-oem-6.8 Ignored
linux-oem-6.11 Ignored
linux-oem-6.14 Ignored
linux-oem-6.17 Not affected
linux-raspi Not affected
linux-raspi2 Not in release
linux-raspi-5.4 Not in release
linux-raspi-realtime Not affected
linux-realtime Not affected
linux-realtime-6.8 Not in release
linux-realtime-6.14 Ignored
linux-riscv Ignored
linux-riscv-5.8 Not in release
linux-riscv-5.11 Not in release
linux-riscv-5.15 Not in release
linux-riscv-5.19 Not in release
linux-riscv-6.5 Not in release
linux-riscv-6.8 Not in release
linux-riscv-6.14 Ignored
linux-riscv-6.17 Not affected
linux-starfive-5.19 Not in release
linux-starfive-6.2 Not in release
linux-starfive-6.5 Not in release
linux-xilinx Not affected
linux-xilinx-zynqmp Not in release
linux-realtime-6.17 Not affected
Show all 157 packages Show less packages

CVE-2026-44307

Medium priority
Not affected

Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization...

1 affected package

mako

Package 24.04 LTS
mako Not affected
Show less packages

CVE-2026-44301

Medium priority
Needs evaluation

Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses Node-based asset pipelines (PostCSS, Babel, TailwindCSS), Hugo invoked the configured Node tools without restrictions on file system...

1 affected package

hugo

Package 24.04 LTS
hugo Needs evaluation
Show less packages

CVE-2026-44296

Medium priority

Not in release

Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.167, a remote, unauthenticated denial of service (DoS) vulnerability affects Deskflow servers running with TLS enabled (the default). When any TCP peer connects to the...

1 affected package

deskflow

Package 24.04 LTS
deskflow Not in release
Show less packages

CVE-2026-42268

Medium priority
Needs evaluation

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception (std::out_of_range) caused by unsigned integer underflow...

1 affected package

modsecurity

Package 24.04 LTS
modsecurity Needs evaluation
Show less packages

CVE-2026-8052

Medium priority

Not in release

HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2...

1 affected package

nomad

Package 24.04 LTS
nomad Not in release
Show less packages

CVE-2026-7474

Medium priority

Not in release

HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.

1 affected package

nomad

Package 24.04 LTS
nomad Not in release
Show less packages

CVE-2026-6959

Medium priority

Not in release

HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-6959) is fixed in Nomad 2.0.1,...

1 affected package

nomad

Package 24.04 LTS
nomad Not in release
Show less packages

CVE-2026-42338

Medium priority
Needs evaluation

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML...

1 affected package

node-ip-address

Package 24.04 LTS
node-ip-address Needs evaluation
Show less packages

CVE-2026-8430

Medium priority
Needs evaluation

SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to execute arbitrary code in the context of the web server....

1 affected package

spip

Package 24.04 LTS
spip Needs evaluation
Show less packages