CVE-2026-24722

A NULL pointer dereference vulnerability affects File Station 5 . A remote attacker who has obtained a valid user account can exploit this flaw to execute a denial-of-service (DoS) attack. The issue has been resolved in File Station 5 version 5.5.6.5243 and subsequent releases. No specific exploi...

CVE-2026-24721 Null Pointer Dereference in File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2026-24721

A NULL pointer dereference vulnerability exists in File Station 5 . A remote attacker with valid user account privileges can exploit this flaw to trigger a denial-of-service (DoS) attack. The vulnerability has been resolved in File Station 5 5.5.6.5243 and subsequent versions. No specific exploit...

EUVD-2026-101876

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

EUVD-2025-211091

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

CVE-2025-29896

A NULL pointer dereference vulnerability exists in Qsync Central , specifically within the qsyncsrv.cgi component. A remote attacker who has obtained a valid user account can exploit this flaw to execute a denial-of-service (DoS) attack. The vulnerability is addressed in Qsync Central version 5.0...

CVE-2025-29896 NULL Pointer Dereference in qsyncsrv.cgi

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

EUVD-2025-211090

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

CVE-2025-29895 NULL Pointer Dereference in qsyncsrv.cgi

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

CVE-2025-29895

A NULL pointer dereference vulnerability exists in Qsync Central , specifically affecting the qsyncsrv.cgi component. A remote attacker who has obtained a valid user account can exploit this flaw to trigger a denial-of-service (DoS) attack. The vulnerability has been addressed in Qsync Central ve...

CVE-2026-101302

The FreeBSD kernel's KTLS (Kernel TLS) module is vulnerable to a Remote Denial of Service (DoS) due to an off-by-one bug in the code that searches for the inner record type in TLS 1.3 decrypted payloads. A remote peer can trigger an underflow followed by an unconditional NULL pointer dereference ...

EUVD-2026-101870

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

CVE-2026-110834

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending read or write requests for a redirected serial device before the device is opened or after it has been closed. Because FreeRDP does not verify that the serial communication...

CVE-2026-110829

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending a malformed audio channel rdpsnd fragment to a connecting client. Due to missing validation of packet flags, processing a terminating fragment on an uninitialized channel...

EUVD-2026-101717

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

EUVD-2026-101712

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service...

PT-2026-115134

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

CVE-2026-107778

MIT Kerberos 5 krb5 through 1.22.2 contains a NULL pointer dereference in makecredlist in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticketinfo entries through...

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

UBUNTU-CVE-2026-107778

MIT Kerberos 5 krb5 through 1.22.2 contains a NULL pointer dereference in makecredlist in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticketinfo entries through...