Lucene search
+L

102446 matches found

UbuntuCve
UbuntuCve
•added 2026/10/12 5:17 p.m.•8 views

CVE-2026-109241

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

3.1CVSS5.5AI score0.00219EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/12 4:04 p.m.•17 views

CVE-2026-109272

ImageMagick versions 7.1.1-31 before 7.1.2-32 are vulnerable to a NULL pointer dereference within the PostScript decoder . This vulnerability is triggered when a specific policy limit is reached during the processing of a crafted PostScript file. An attacker can leverage this flaw to crash the ap...

6.3CVSS5.3AI score0.00354EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/12 4:04 p.m.•9 views

EUVD-2026-97716

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

6.3CVSS5.3AI score0.00354EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/12 4:04 p.m.•37 views

CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

6.3CVSS0.00354EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/12 4:04 p.m.•10 views

CVE-2026-109272

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

6.3CVSS5.3AI score0.00354EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/10/12 4:04 p.m.•9 views

CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

6.3CVSS5.4AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/12 4:04 p.m.•7 views

EUVD-2026-97696

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

6CVSS5.5AI score0.00233EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/12 4:04 p.m.•13 views

CVE-2026-109252

FreeRDP versions 3.9.0 before 3.32.0 are vulnerable to a NULL pointer dereference within the RDPEAR NDR reader . A malicious server can trigger this by sending a CreateApReqAuthenticatorReq with a NameCount of two or more that ends before the Names pointer. This causes the cleanup process to dere...

6CVSS5.5AI score0.00233EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/12 4:04 p.m.•15 views

CVE-2026-109252 FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

6CVSS5.6AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/10/12 4:04 p.m.•13 views

CVE-2026-109252

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

6CVSS5.5AI score0.00233EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/10/12 4:04 p.m.•36 views

CVE-2026-109252 FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

6CVSS0.00233EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/12 4:04 p.m.•8 views

EUVD-2026-97685

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

3.1CVSS5.5AI score0.00219EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/12 4:04 p.m.•5 views

CVE-2026-109241

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

3.1CVSS5.5AI score0.00219EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/12 4:04 p.m.•11 views

CVE-2026-109241

FreeRDP versions before 3.32.0 are vulnerable to a NULL pointer dereference in the client video redirection channel. A malicious server can trigger a denial of service (DoS) by sending out-of-order messages, specifically a Geometry CLEAR message to null presentation->geometry followed by Video...

3.1CVSS5.5AI score0.00219EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/12 4:04 p.m.•5 views

CVE-2026-109241

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

3.1CVSS5.5AI score0.00219EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/10/12 4:04 p.m.•13 views

CVE-2026-109241 FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

2.3CVSS5.5AI score0.00219EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/12 4:04 p.m.•30 views

CVE-2026-109241 FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

3.1CVSS0.00219EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/10/12 2:58 p.m.•8 views

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

9.1CVSS6.3AI score0.00641EPSS
SaveExploits1References66
osv_suse
osv_suse
•added 2026/10/12 2:58 p.m.•12 views

SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

8.7CVSS6.2AI score0.00641EPSS
SaveExploits1References34
Kitploit
Kitploit
•added 2026/10/12 1:37 p.m.•17 views

CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

10CVSS9.6AI score0.93884EPSS
SaveExploits24
Rows per page
Query Builder