EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint
CVE-2026-109959
EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated users to read audited fie
#advisory
共收录 23043 条相关情报。
← 返回所有主题EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search
CVE-2026-109958
EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read re
EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter
CVE-2026-109957
EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Im
NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path
CVE-2026-109956
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.paths
Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decoding
CVE-2026-109955
Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated at
Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference
CVE-2026-109954
Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requ
FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin
CVE-2026-109953
FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin o
FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
CVE-2026-109952
The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against it
FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name
CVE-2026-109951
FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freer
FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
CVE-2026-109950
FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to
FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard
CVE-2026-109949
FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartca
FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection
CVE-2026-109948
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call th
FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read
CVE-2026-109947
FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP s
FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width
CVE-2026-109946
FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion,
FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit
CVE-2026-109945
FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONN
FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle
CVE-2026-109944
FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation
FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
CVE-2026-109943
FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the
FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet
CVE-2026-109942
FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c beca
FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response
CVE-2026-109941
FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD
FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name
CVE-2026-109940
FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName