CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...

CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...

CVE-2026-41252 xrdp: lib_palette_update Heap Buffer Overflow & RCE

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...

Linux Distros Unpatched Vulnerability : CVE-2026-41252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in...

CVE-2022-41252

creationtimestamp| type| source ---|---|--- 2025-10-06 13:41:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2jqiej6wbp2...

CVE-2025-41252

Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote,...

CVE-2025-41252

creationtimestamp| type| source ---|---|--- 2025-09-30 07:18:53+00:00| seen| https://gist.github.com/Darkcrai86/7a0e42f4d9d6f3b52da3d5535b536783 2025-09-30 17:38:36+00:00| seen| https://t.me/truesecator/7477 2025-09-30 23:24:40+00:00| seen|...

CVE-2022-41252

Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins...

CVE-2024-41252

An Incorrect Access Control vulnerability was found in /smsa/adminstudentregisterapproval.php and /smsa/adminstudentregisterapprovalsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration...

CVE-2023-41252

The CVE-2023-41252 issue affects Intel® QAT software drivers for Windows prior to version QAT1.7-W-1.11.0. The root cause is an out-of-bounds read in these drivers, which could allow an authenticated user to trigger a denial of service via local access. Intel’s advisory and multiple aggregators c...

Intel® QAT Software Drivers Advisory

Summary: A potential security vulnerability in some Intel® QuickAssist Technology QAT software drivers for Windows may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-41252 Description: Out-of-bounds rea...

CVE-2022-41252

The CVE CVE-2022-41252 affects Jenkins CONS3RT Plugin 1.0.0 and earlier. Description: missing permission checks in several HTTP endpoints allow users with Overall/Read permission to enumerate credentials IDs stored in Jenkins, enabling potential credential exposure. Root cause: insufficient acces...

CVE-2022-41252

Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins...

CVE-2021-41252 Cross-site scripting (XSS) from writer field content in the site frontend

Kirby is an open source file structured CMS Impact Kirby's writer field stores its formatted content as HTML code. Unlike with other field types, it is not possible to escape HTML special characters against cross-site scripting XSS attacks, otherwise the formatting would be lost. If the user is...

CVE-2021-41252

Kirby CMS vulnerability CVE-2021-41252 affects the writer field in Kirby’s site frontend: unsanitized HTML content can be injected and executed as XSS when a logged-in Panel user saves content via the API. The issue stems from inadequate escaping of HTML in the writer field, enabling malicious HT...