Alpine

7 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-48710 Exploited Public exploit EPSS 70%

  Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

  Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuil…

  Kludex starlette starlette starlette Debian Ubuntu Alpine PyPI
  May 26, 2026

  KEV Sep 2, 2026
• Medium 4.3
  CVE-2026-32202 Exploited Public exploit EPSS 71%

  Windows Shell Spoofing Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Alpine
  Apr 14, 2026

  KEV Apr 28, 2026
• Medium 6.8
  CVE-2021-22204 Exploited Public exploit EPSS 100%

  Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exe…

  ExifTool ExifTool libimage-exiftool-perl libimage-exiftool-perl Debian Ubuntu Alpine
  Apr 23, 2021

  KEV Nov 17, 2021
• Medium 5.5
  CVE-2020-1472 Exploited · Ransomware Public exploit EPSS 99%

  Netlogon Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows Debian Ubuntu Alpine
  Aug 17, 2020

  KEV Nov 3, 2021
• Medium 6.5
  CVE-2020-11652 Exploited Public exploit EPSS 86%

  SaltStack Salt is vulnerable Arbitrary Directory Access

  An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

  salt salt salt Ubuntu Alpine PyPI
  Apr 30, 2020

  KEV Nov 3, 2021
• Medium 6.9
  CVE-2020-11023 Exploited Public exploit EPSS 85%

  Potential XSS vulnerability in jQuery

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

  jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
  Apr 29, 2020

  KEV Jan 23, 2025
• Medium 6.5
  CVE-2019-5786 Exploited Public exploit EPSS 61%

  Use-After-Free in puppeteer

  Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine npm
  Jun 27, 2019

  KEV May 23, 2022