54542 matches found
SUSE CVE-2026-53603
unknown...
SUSE CVE-2026-53604
unknown...
SUSE CVE-2026-53649
Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...
SUSE CVE-2026-53713
unknown...
SUSE CVE-2026-53714
unknown...
SUSE CVE-2026-53715
unknown...
SUSE CVE-2026-53716
unknown...
SUSE CVE-2026-53717
unknown...
SUSE CVE-2026-53718
unknown...
SUSE CVE-2026-53719
unknown...
SUSE CVE-2026-53999
unknown...
SUSE CVE-2026-54072
unknown...
SUSE CVE-2026-54096
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, POST /api/share/ accepts an authenticated request for an arbitrary path and stores a public share record without checking whether the target fi...
SUSE CVE-2026-54174
unknown...
SUSE CVE-2026-54246
unknown...
SUSE CVE-2026-54247
unknown...
SUSE CVE-2026-54272
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known IPv6...
SUSE CVE-2026-54450
unknown...