Search CVE reports


Toggle filters

51 – 60 of 42051 results

Status is adjusted based on your filters.


CVE-2026-3884

Medium priority
Needs evaluation

Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert for each 'target' element. An attacker would need to set an arbitrary...

1 affected package

libjs-spin.js

Package 18.04 LTS
libjs-spin.js Needs evaluation
Show less packages

CVE-2026-31988

Medium priority
Needs evaluation

(yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contai ...)

1 affected package

node-yauzl

Package 18.04 LTS
node-yauzl Needs evaluation
Show less packages

CVE-2026-31958

Medium priority
Needs evaluation

(Tornado is a Python web framework and asynchronous networking library. ...)

1 affected package

python-tornado

Package 18.04 LTS
python-tornado Needs evaluation
Show less packages

CVE-2026-31853

Medium priority
Needs evaluation

(ImageMagick is free and open-source software used for editing and mani ...)

1 affected package

imagemagick

Package 18.04 LTS
imagemagick Needs evaluation
Show less packages

CVE-2026-28384

Medium priority
Not affected

An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints....

1 affected package

lxd

Package 18.04 LTS
lxd Not affected
Show less packages

CVE-2026-2808

Medium priority
Needs evaluation

(HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22. ...)

1 affected package

consul

Package 18.04 LTS
consul Needs evaluation
Show less packages

CVE-2026-2436

Medium priority
Needs evaluation

[Unknown description]

2 affected packages

libsoup2.4, libsoup3

Package 18.04 LTS
libsoup2.4 Needs evaluation
libsoup3
Show less packages

CVE-2026-0716

Medium priority
Vulnerable

A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended...

2 affected packages

libsoup2.4, libsoup3

Package 18.04 LTS
libsoup2.4 Vulnerable
libsoup3
Show less packages

CVE-2026-3805

Medium priority
Not affected

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

1 affected package

curl

Package 18.04 LTS
curl Not affected
Show less packages

CVE-2026-3784

Low priority
Fixed

1 affected package

curl

Package 18.04 LTS
curl Fixed
Show less packages