27489 matches found
CVE-2021-47771
RDP Manager 4.9.9.3 contains a denial of service vulnerability in connection input fields that allows local attackers to crash the application. Attackers can add oversized entries in Verbindungsname and Server fields to permanently freeze and crash the software, potentially requiring full...
CVE-2021-47771
Affected software: RDP Manager 4.9.9.3. Vulnerability: denial-of-service via malformed input fields in the connection configuration, specifically Verbindungsname and Server, allowing a local attacker to freeze/crash the application and potentially require full reinstallation. Root cause: input fi...
CVE-2021-47771 RDP Manager 4.9.9.3 - Denial-of-Service (PoC)
RDP Manager 4.9.9.3 contains a denial of service vulnerability in connection input fields that allows local attackers to crash the application. Attackers can add oversized entries in Verbindungsname and Server fields to permanently freeze and crash the software, potentially requiring full...
CVE-2021-47764
AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes an...
CVE-2021-47765
AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields. Attackers can trigger the crash by inserting 1000 characters into the username or email address fields, causing the application to...
EUVD-2026-2771
AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes an...
EUVD-2026-2772
AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields. Attackers can trigger the crash by inserting 1000 characters into the username or email address fields, causing the application to...
CVE-2021-47765
AbsoluteTelnet 11.24 is affected by a local denial-of-service vulnerability where sending strings of about 1000 characters in the username field (and related error reporting fields) crashes the application. The Root Cause is improper handling/validation of long input in username and email/error f...
CVE-2021-47762
CVE-2021-47762 affects HTTPDebuggerPro 9.11 and is caused by an unquoted service path in the service configuration, enabling local attackers to potentially execute arbitrary code with elevated privileges. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listing) with hig...
CVE-2021-47759 MTPutty 1.0.1.21 - SSH Password Disclosure
MTPutty 1.0.1.21 contains a sensitive information disclosure vulnerability that allows local attackers to view SSH connection passwords through Windows PowerShell process listing. Attackers can run a PowerShell command to retrieve the full command line of MTPutty processes, exposing plaintext SSH...
CVE-2021-47759 MTPutty 1.0.1.21 - SSH Password Disclosure
MTPutty 1.0.1.21 contains a sensitive information disclosure vulnerability that allows local attackers to view SSH connection passwords through Windows PowerShell process listing. Attackers can run a PowerShell command to retrieve the full command line of MTPutty processes, exposing plaintext SSH...
EUVD-2026-2776
MTPutty 1.0.1.21 contains a sensitive information disclosure vulnerability that allows local attackers to view SSH connection passwords through Windows PowerShell process listing. Attackers can run a PowerShell command to retrieve the full command line of MTPutty processes, exposing plaintext SSH...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003271)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003271 advisory. The mminit function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the -exefile member of a new process's mmstruct, allowing a local attacker to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002132)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002132 advisory. drivers/hid/hid-picolcdcore.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDPICOLCD is enabled, allows physically...
EulerOS 2.0 SP10 : glib2 (EulerOS-SA-2026-1027)
According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003352)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003352 advisory. An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of...
EulerOS 2.0 SP10 : glib2 (EulerOS-SA-2026-1048)
According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003406)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003406 advisory. The HMAC implementation crypto/hmac.c in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a loc...
Celestial AbsoluteTelnet Buffer Error Vulnerability
Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.24 of Celestial AbsoluteTelnet contains a buffer error vulnerability. This vulnerability stems from manipulating the username and error report fields, which could allow local...
PT-2026-3126
A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of Juniper Networks Junos OS on MX10k Series allows a local, low-privileged attacker executing the 'show system firmware' CLI command to cause an LC480 or LC2101 line card to...