Lucene search
+L

2209 matches found

RedHat Linux
RedHat Linux
•added 2026/04/23 7:18 a.m.•35 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS6.7AI score0.0053EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/04/22 7:54 a.m.•19 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS6.7AI score0.0053EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/04/22 7:48 a.m.•20 views

freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2()

A null pointer dereference has been discovered in FreeRDP. A NULL pointer dereference vulnerability in rdpwritelogoninfov2 allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0...

7.5CVSS6.7AI score0.0053EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•17 views

RHEL 9 : freerdp (RHSA-2026:9640)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9640 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

9.8CVSS7.3AI score0.00667EPSS
SaveExploits5References26
EUVD
EUVD
•added 2026/04/21 9:31 p.m.•41 views

EUVD-2026-24455

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS5.7AI score0.00146EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/21 9:31 p.m.•23 views

EUVD-2026-24416

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell: Core Client. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes t...

5CVSS5.7AI score0.00142EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/21 9:16 p.m.•27 views

CVE-2026-35249

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

3.2CVSS0.00155EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/21 9:16 p.m.•30 views

CVE-2026-35243

Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

7.8CVSS0.00161EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/21 9:16 p.m.•27 views

CVE-2026-35247

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

6CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/21 9:16 p.m.•22 views

CVE-2026-35246

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/21 9:16 p.m.•19 views

CVE-2026-35242

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.5CVSS0.00146EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/21 8:35 p.m.•17 views

CVE-2026-35250

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

2.3CVSS6.2AI score0.00154EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2026/04/21 8:35 p.m.•17 views

CVE-2026-35247

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

6CVSS5.8AI score0.00174EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/04/21 8:35 p.m.•39 views

CVE-2026-34317

Removed by vendor...

5CVSS7.5AI score0.00142EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/04/21 8:35 p.m.•12 views

CVE-2026-34281

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

6.5CVSS5.7AI score0.00152EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•32 views

PT-2026-34105

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

6.5CVSS5.7AI score0.00152EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•22 views

PT-2026-34139

Name of the Vulnerable Software and Affected Versions MySQL Shell versions 8.0.0 through 8.0.45 MySQL Shell versions 8.4.0 through 8.4.8 MySQL Shell versions 9.0.0 through 9.6.0 Description An issue in the Shell: Core Client component allows a low privileged attacker with access to the...

6.5CVSS7.2AI score0.0045EPSS
SaveExploits0References69
SUSE CVE
SUSE CVE
•added 2026/04/20 11:26 p.m.•16 views

SUSE CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain...

6.3CVSS6.9AI score0.00501EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/17 8:16 p.m.•19 views

CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain...

6.5CVSS0.00501EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/17 8:16 p.m.•18 views

DEBIAN-CVE-2026-32624

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain...

6.5CVSS6.9AI score0.00501EPSS
SaveExploits0References1
Rows per page
Query Builder