129248 matches found
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
MAL-2026-10605 Malicious code in @radivi-ui/react-dialog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e92ae03eb6adb090fb832665431984cccef31039bb920e3850535f4defe610 @radivi-ui/react-dialog is a typosquat of @radix-ui/react-dialog whose main entry index.js is a self-executing IIFE that runs whoami and hostname via...
CVE-2026-45067 Symfony: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address
Description Symfony\Component\Mime\Address is the value-object every Symfony Mailer address to/cc/bcc/from/reply-to flows through; its constructor is documented as validating the address and throwing on invalid input, so developers treat it as a security boundary. The constructor accepts email...
CVE-2026-45067
Description Symfony\Component\Mime\Address is the value-object every Symfony Mailer address to/cc/bcc/from/reply-to flows through; its constructor is documented as validating the address and throwing on invalid input, so developers treat it as a security boundary. The constructor accepts email...
CVE-2026-49800
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...
CVE-2026-49788
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network...
CVE-2026-49181
Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-15427
An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...
CVE-2026-15429
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...
EUVD-2026-44303
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network...
CVE-2026-57982 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-57982 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-57982
CVE-2026-57982 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by the use of an uninitialized resource. An authenticated attacker could disclose information over the network. Public details identify the affected component as Windows RDP/RDP client-server int...
CVE-2026-56190
CVE-2026-56190 is a Windows Remote Desktop Protocol vulnerability described as a use of an uninitialized resource in Windows RDP that allows an unauthenticated attacker to execute code over the network. The CVE has a very high severity (CVSSv3.1 base score 9.8, CRITICAL) and is referenced in Micr...
CVE-2026-56190 Remote Desktop Protocol Remote Code Execution Vulnerability
...
CVE-2026-56190 Remote Desktop Protocol Remote Code Execution Vulnerability
...
CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-54126
CVE-2026-54126 is a Windows RDP information-disclosure vulnerability (out-of-bounds read). It is triggered over the network and requires user interaction, with no privileges required by the attacker; impact is disclosure of confidential information. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C...