FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in...
CVE-2026-111377
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to e
#severity:high
共收录 5410 条相关情报。
← 返回所有主题This vulnerability allows remote attackers to disclose sensitive information on affected...
CVE-2026-105227
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
This vulnerability allows remote attackers to disclose sensitive information on affected...
CVE-2026-105228
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's...
CVE-2026-109813
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing prod
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client,...
CVE-2026-92629
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in th
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role...
CVE-2026-84823
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBA
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could...
CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physica
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed...
CVE-2026-75941
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese mar
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE...
CVE-2026-111369
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson rout
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows...
CVE-2026-111366
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that...
CVE-2026-111363
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-pri
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in...
CVE-2026-111364
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows...
CVE-2026-111359
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefron
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non...
CVE-2026-111365
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in...
CVE-2026-111352
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restrict
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public...
CVE-2026-111347
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encry
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores...
CVE-2026-111330
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as
JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api...
CVE-2026-111313
JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler th
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient:...
CVE-2026-111280
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicio
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows...
CVE-2026-111279
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exh