FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing...
CVE-2026-110830
FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server
#severity:high
共收录 5417 条相关情报。
← 返回所有主题FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd...
CVE-2026-110829
FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets
FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in...
CVE-2026-110832
FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows a
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of...
CVE-2026-110839
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_co
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly...
CVE-2026-107795
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative author
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required...
CVE-2026-102298
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenti
An administrator could retrieve the password reset code for any user and take over the account. ...
CVE-2026-108337
An administrator could retrieve the password reset code for any user and take over the account. The password reset co
Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that...
CVE-2026-110775
Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users
holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway...
CVE-2026-110769
holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any m
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion
CVE-2026-72923
### Impact A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumpt
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-110445
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers
The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email'...
CVE-2026-103422
The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions u
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL...
CVE-2026-102251
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' pa
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array...
CVE-2026-82715
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-110444
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default...
CVE-2026-14765
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchUR
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation...
CVE-2026-104749
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up...
CVE-2026-103423
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is...
CVE-2026-104767
The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Esc
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is...
CVE-2026-17092
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authoriz