Search CVE reports


Toggle filters

41 – 50 of 48128 results

Status is adjusted based on your filters.


CVE-2026-28861

Medium priority
Ignored

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 16.04 LTS
webkitgtk Ignored
webkit2gtk Ignored
qtwebkit-source Ignored
qtwebkit-opensource-src Ignored
wpewebkit
Show less packages

CVE-2026-28859

Medium priority
Ignored

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 16.04 LTS
webkitgtk Ignored
webkit2gtk Ignored
qtwebkit-source Ignored
qtwebkit-opensource-src Ignored
wpewebkit
Show less packages

CVE-2026-28857

Medium priority
Ignored

5 affected packages

webkitgtk, webkit2gtk, qtwebkit-source, qtwebkit-opensource-src, wpewebkit

Package 16.04 LTS
webkitgtk Ignored
webkit2gtk Ignored
qtwebkit-source Ignored
qtwebkit-opensource-src Ignored
wpewebkit
Show less packages

CVE-2026-28375

Medium priority
Needs evaluation

A testdata data-source can be used to trigger out-of-memory crashes in Grafana.

1 affected package

grafana

Package 16.04 LTS
grafana Needs evaluation
Show less packages

CVE-2026-28369

Medium priority
Needs evaluation

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates...

1 affected package

undertow

Package 16.04 LTS
undertow Needs evaluation
Show less packages

CVE-2026-28368

Medium priority
Needs evaluation

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header...

1 affected package

undertow

Package 16.04 LTS
undertow Needs evaluation
Show less packages

CVE-2026-28367

Medium priority
Needs evaluation

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache...

1 affected package

undertow

Package 16.04 LTS
undertow Needs evaluation
Show less packages

CVE-2026-27880

Medium priority
Needs evaluation

The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.

1 affected package

grafana

Package 16.04 LTS
grafana Needs evaluation
Show less packages

CVE-2026-27879

Medium priority
Needs evaluation

A resample query can be used to trigger out-of-memory crashes in Grafana.

1 affected package

grafana

Package 16.04 LTS
grafana Needs evaluation
Show less packages

CVE-2026-27877

Medium priority
Needs evaluation

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to...

1 affected package

grafana

Package 16.04 LTS
grafana Needs evaluation
Show less packages