#advisory

共收录 23043 条相关情报。

安全公告2026-10-13 发布INFO

FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order

CVE-2026-109939

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/co

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

安全公告2026-10-13 发布INFO

FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update

CVE-2026-109938

Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-190

安全公告2026-10-13 发布INFO

FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username

CVE-2026-109680

FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the b

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-787

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response

CVE-2026-109679

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint retu

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA

CVE-2026-109678

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachab

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-617

安全公告2026-10-13 发布INFO

FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler

CVE-2026-109677

FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect

CVE-2026-109676

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attacke

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-416

安全公告2026-10-13 发布INFO

fastify vulnerable to header validation bypass via case-sensitive propertyNames

CVE-2026-107832

fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowerc

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-178

安全公告2026-10-13 发布INFO

HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection

CVE-2026-109409

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-74 #cwe-77

安全公告2026-10-13 发布INFO

macrozheng mall Coupon Redemption generateOrder race condition

CVE-2026-109407

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

安全公告2026-10-13 发布INFO

macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error

CVE-2026-109406

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderSer

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-840

安全公告2026-10-13 发布INFO

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the...

CVE-2026-108971

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bi