FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash...
CVE-2026-111880
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that
#severity:high
共收录 5410 条相关情报。
← 返回所有主题FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a...
CVE-2026-111881
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calcu
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-109701
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PAYCOMET PAYCOMET
Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5...
CVE-2026-110889
Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows R
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is...
CVE-2026-111110
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Si
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to...
CVE-2026-100316
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-110384
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fa
Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
CVE-2026-96627
## Summary A user holding the delegated `users:update` permission can reset the global administrator's password and take
kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content
CVE-2026-100349
## Summary `ValidateResponse` panics on a nil pointer when a spec declares a response header with `content` instead of
lopdf has a stack overflow via deeply nested PDF objects
`lopdf::Document::load_mem` (and the other `load*` entry points) parses nested PDF arrays and dictionaries with unbounde
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
CVE-2026-102834
### Summary `IPCameraFrameGrabber` parses the `Content-Length` value from the multipart MJPEG HTTP stream returned by th
Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL...
CVE-2026-111389
Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in
Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows...
CVE-2026-111387
Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retri
FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends ...
CVE-2026-111380
FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), w
Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file...
CVE-2026-111384
Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint be
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in...
CVE-2026-111382
FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in...
CVE-2026-111381
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local
Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows...
CVE-2026-111383
Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unb
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in...
CVE-2026-111379
FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in...
CVE-2026-111378
FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that