xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER
CVE-2026-54538
xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to pr
#advisory
共收录 23779 条相关情报。
← 返回所有主题SQL injection in syslog-ng SQL destionation driver
CVE-2026-39879
Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb
xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification
CVE-2026-44978
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the
Frappe LMS enrollment bypass in paid courses via unrelated batch
CVE-2026-39385
Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment vali
xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow
CVE-2026-44178
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within t
xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)
CVE-2026-55645
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client
NULL Pointer Dereference in REST API properties_parse via Malformed user_properties
CVE-2026-47276
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attac
XRDP is vulnerable to a server timing attack, leading to user enumeration
CVE-2026-42218
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login in
nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS
CVE-2026-47275
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicio
xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
CVE-2026-41521
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing s
NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read
CVE-2026-35217
NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the fi
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions
CVE-2026-58482
Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalI
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret
CVE-2026-46701
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an e
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
CVE-2026-58481
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped fil
xrdp: lib_palette_update Heap Buffer Overflow & RCE
CVE-2026-41252
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
CVE-2026-58414
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recu
net/sched: dualpi2: fix GSO backlog accounting
CVE-2026-64207
In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting Whe
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
CVE-2026-64206
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before tak
i2c: i801: fix hardware state machine corruption in error path
CVE-2026-64205
In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
CVE-2026-64192
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if