Lucene search
+L

1879 matches found

RedHat Linux
RedHat Linux
added 2026/04/23 7:18 a.m.26 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.7AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/22 7:54 a.m.11 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.7AI score0.00467EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/22 7:48 a.m.14 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS5.7AI score0.00467EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.11 views

RHEL 9 : freerdp (RHSA-2026:9640)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9640 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

9.8CVSS6.6AI score0.00656EPSS
SaveExploits5References26
EUVD
EUVD
added 2026/04/21 9:31 p.m.22 views

EUVD-2026-24455

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS5.7AI score0.00107EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/21 9:31 p.m.13 views

EUVD-2026-24416

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell: Core Client. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes t...

5CVSS5.7AI score0.00153EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/21 9:16 p.m.15 views

CVE-2026-35249

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

3.2CVSS0.0011EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/21 9:16 p.m.22 views

CVE-2026-35243

Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

7.8CVSS0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/21 9:16 p.m.14 views

CVE-2026-35246

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS0.00107EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/21 9:16 p.m.17 views

CVE-2026-35247

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

6CVSS0.00124EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/21 9:16 p.m.11 views

CVE-2026-35242

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS0.00107EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.8 views

CVE-2026-35250

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

2.3CVSS5.7AI score0.0011EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.12 views

CVE-2026-35247

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

6CVSS5.8AI score0.00124EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/04/21 8:35 p.m.27 views

CVE-2026-34317

Removed by vendor...

5CVSS7.6AI score0.00153EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.6 views

CVE-2026-34281

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

6.5CVSS5.7AI score0.00116EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.25 views

PT-2026-34105

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

6.5CVSS5.7AI score0.00116EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.14 views

PT-2026-34139

Name of the Vulnerable Software and Affected Versions MySQL Shell versions 8.0.0 through 8.0.45 MySQL Shell versions 8.4.0 through 8.4.8 MySQL Shell versions 9.0.0 through 9.6.0 Description An issue in the Shell: Core Client component allows a low privileged attacker with access to the...

6.5CVSS7.2AI score0.00323EPSS
SaveExploits0References69
SUSE CVE
SUSE CVE
added 2026/04/20 11:26 p.m.11 views

SUSE CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain...

6.3CVSS6AI score0.00408EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/17 8:16 p.m.11 views

CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain...

6.5CVSS0.00408EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/17 8:16 p.m.5 views

DEBIAN-CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain...

6.5CVSS5.9AI score0.00408EPSS
SaveExploits0References1
Rows per page
Query Builder