Browse All CVEs
50,476 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-121406 |
medium | 5.3 | 0.0023 | 2026-11-03 | FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received reje | |
CVE-2026-121405 |
medium | 5.3 | 0.0029 | 2026-11-03 | FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP req | |
CVE-2026-121404 |
high | 7.1 | 0.0038 | 2026-11-03 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that | |
CVE-2026-121403 |
medium | 5.3 | 0.0023 | 2026-11-03 | FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive D | |
CVE-2026-121402 |
high | 7.1 | 0.0025 | 2026-11-03 | FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malici | |
CVE-2026-121401 |
medium | 5.3 | 0.0032 | 2026-11-03 | FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet | |
CVE-2026-121400 |
high | 7.1 | 0.0031 | 2026-11-03 | FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_pa | |
CVE-2026-121399 |
medium | 5.3 | 0.0027 | 2026-11-03 | FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet tha | |
CVE-2026-121398 |
high | 8.2 | 0.0025 | 2026-11-03 | FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp- | |
CVE-2026-121397 |
medium | 5.3 | 0.0027 | 2026-11-03 | FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer | |
CVE-2026-121396 |
medium | 5.3 | 0.0032 | 2026-11-03 | FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a rea | |
CVE-2026-121395 |
high | 7.1 | 0.0025 | 2026-11-03 | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differenti | |
CVE-2026-121394 |
high | 7.1 | 0.0025 | 2026-11-03 | FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decod | |
CVE-2026-121393 |
high | 7.1 | 0.0036 | 2026-11-03 | FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows ma | |
CVE-2026-121392 |
critical | 9.1 | 0.0017 | 2026-11-03 | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_ver | |
CVE-2026-121391 |
medium | 5.3 | 0.0023 | 2026-11-03 | FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_c | |
CVE-2026-121390 |
medium | 5.3 | 0.0015 | 2026-11-03 | FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because | |
CVE-2026-121389 |
low | 2.3 | 0.0031 | 2026-11-03 | FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump | |
CVE-2026-121388 |
high | 7.1 | 0.0031 | 2026-11-03 | FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerabilit | |
CVE-2026-121387 |
medium | 5.3 | 0.0023 | 2026-11-03 | FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_de | |
CVE-2026-121386 |
high | 8.7 | 0.0027 | 2026-11-03 | FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png | |
CVE-2026-12505 |
high | 7.8 | 0.0016 | 2026-11-03 | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely | |
CVE-2016-0012 |
— | — | 0.1092 | 2026-11-03 | Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 | |
CVE-2026-16493 |
high | 7.8 | 0.0027 | 2026-11-03 | A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-c | |
CVE-2026-118489 |
high | 7.5 | 0.0034 | 2026-11-03 | In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is | |
CVE-2026-101434 |
high | 7.6 | 0.0027 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101427 |
high | 8.1 | 0.0035 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101426 |
medium | 6.9 | 0.0013 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101424 |
medium | 5.8 | 0.0030 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101422 |
high | 8.1 | 0.0042 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101419 |
medium | 6.5 | 0.0034 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101418 |
medium | 6.5 | 0.0034 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101417 |
low | 3.7 | 0.0025 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101414 |
low | 2.9 | 0.0013 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101413 |
medium | 5.3 | 0.0032 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-101409 |
high | 7.5 | 0.0040 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-78162 |
critical | 10.0 | 0.0108 | 2026-11-03 | 1 PoC | Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apa |
CVE-2026-121513 |
high | 7.5 | 0.0044 | 2026-11-03 | Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacke | |
CVE-2026-121512 |
high | 7.5 | 0.0045 | 2026-11-03 | Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated | |
CVE-2026-121511 |
high | 7.1 | 0.0014 | 2026-11-03 | Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory | |
CVE-2026-121510 |
high | 7.5 | 0.0045 | 2026-11-03 | Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser | |
CVE-2026-121508 |
medium | 5.9 | 0.0038 | 2026-11-03 | Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to | |
CVE-2026-121507 |
medium | 5.9 | 0.0038 | 2026-11-03 | Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attac | |
CVE-2026-121506 |
high | 7.4 | 0.0045 | 2026-11-03 | An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) | |
CVE-2026-121505 |
low | 3.7 | 0.0029 | 2026-11-03 | An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_co | |
CVE-2026-106991 |
high | 7.1 | 0.0037 | 2026-11-03 | 1 PoC | hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered |
CVE-2026-120572 |
high | 8.8 | 0.0038 | 2026-11-03 | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerabilit | |
CVE-2026-89295 |
high | 7.5 | 0.0043 | 2026-11-03 | In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical | |
CVE-2026-85035 |
high | 8.8 | 0.0023 | 2026-11-03 | The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq | |
CVE-2026-85034 |
medium | 6.7 | 0.0024 | 2026-11-03 | The Bluetooth host's GATT client passed the value of a received Handle Value Notification, |