Lucene search
+L

5709 matches found

OSV
OSV
added 2023/10/10 2:15 p.m.12 views

CVE-2023-4966

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

7.5CVSS5.8AI score0.99999EPSS
SaveExploits15References3
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.6 views

Microsoft Windows RDP Security Vulnerability

Microsoft Remote Desktop Protocol Client is a client software application for connecting to remote desktops from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows RDP. An attacker could exploit this vulnerability to gain elevated privileges. Windows Server 2008 for...

7.8CVSS7AI score0.00529EPSS
SaveExploits0References4
NCSC
NCSC
added 2023/10/10 12:00 a.m.17 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The most serious vulnerability with reference CVE-2023-35349 is in Microsoft Message Queueing MSQS. This vulnerability allows an unauthenticated remote malicious person to execute arbitrary execute arbitrary code with service privileges. MSMQ is...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits22
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.9 views

Microsoft Windows Remote Desktop Protocol Security Vulnerability

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Desktop Protocol. An attacker exploiting this vulnerability could gain access to sensitive...

7.5CVSS9AI score0.02008EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.12 views

Fortinet FortiOS Security Vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering, and antispam security features. A security vulnerability exists in Fortinet...

7.5CVSS6.7AI score0.00879EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.8 views

PT-2023-5977 · Microsoft · Windows Remote Desktop Gateway +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Gateway RD Gateway affected versions not specified Description: The issue is related to a lack of protection for service data in Windows Remote Desktop Gateway RD Gateway, which can be exploited by a remote attacker to...

7.5CVSS9.3AI score0.02008EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.19 views

The vulnerability of the TightVNC remote desktop access system, related to errors in privilege management, allows a intruder to escalate their privileges.

The vulnerability of the TightVNC remote desktop access system is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to increase their privileges by replacing files…...

9CVSS7.7AI score0.01078EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/06 12:00 a.m.43 views

Fedora 38 : xrdp (2023-0ce6a8afe5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0ce6a8afe5 advisory. Release notes for xrdp v0.9.23.1 2023/09/27 This is a security fix release for CVE-2023-42822. This update is recommended for all xrdp users. Security fixes ...

6.5CVSS5.8AI score0.00636EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/04 12:00 a.m.60 views

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : FreeRDP vulnerabilities (USN-6401-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6401-1 advisory. It was discovered that FreeRDP did not properly manage certain inputs. A malicious server could use this issue to cause...

9.8CVSS6.6AI score0.01694EPSS
SaveExploits10References11
NVD
NVD
added 2023/09/27 6:15 p.m.29 views

CVE-2023-42822

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdppainter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within...

6.5CVSS5.6AI score0.00636EPSS
SaveExploits0References6
Prion
Prion
added 2023/09/27 6:15 p.m.19 views

Out-of-bounds

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdppainter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within...

4CVSS6.4AI score0.00636EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2023/09/27 6:15 p.m.8 views

UBUNTU-CVE-2023-42822

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdppainter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within...

6.5CVSS5.8AI score0.00636EPSS
SaveExploits0References5
CVE
CVE
added 2023/09/27 5:55 p.m.140 views

CVE-2023-42822

CVE-2023-42822 affects xrdp. Access to font glyphs in xrdp_painter.c is not bounds-checked, allowing an out-of-bounds read (potentially followed by a write) in an xrdp process that may run with root privileges on non-Debian platforms. The issue is addressed in release 0.9.23.1; upgrade recommende...

6.5CVSS5.5AI score0.00636EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2023/09/27 5:55 p.m.45 views

CVE-2023-42822 Unchecked access to font glyph info in xrdp

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdppainter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within...

4.6CVSS6.8AI score0.00636EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/09/27 5:55 p.m.90 views

CVE-2023-42822

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdppainter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within...

6.5CVSS6.5AI score0.00636EPSS
SaveExploits0
OSV
OSV
added 2023/09/27 5:55 p.m.26 views

CVE-2023-42822 Unchecked access to font glyph info in xrdp

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdppainter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within...

4.6CVSS5.8AI score0.00636EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/09/23 12:00 a.m.23 views

SUSE SLES12 Security Update : xrdp (SUSE-SU-2023:3735-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3735-1 advisory. - CVE-2023-40184: Fixed restriction bypass via improper session handling bsc1214805. Tenable has extracted the preceding description block...

6.5CVSS6.5AI score0.00853EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/09/22 12:00 a.m.20 views

Fedora: Security Advisory (FEDORA-2023-74108ca60d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.01809EPSS
SaveExploits12References3
OpenVAS
OpenVAS
added 2023/09/22 12:00 a.m.25 views

Fedora: Security Advisory for freerdp (FEDORA-2023-5e6796cb83)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.01809EPSS
SaveExploits12References2
Fedora
Fedora
added 2023/09/21 1:22 a.m.29 views

[SECURITY] Fedora 37 Update: freerdp-2.11.1-1.fc37

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

9.8CVSS7.5AI score0.01809EPSS
SaveExploits12
Rows per page
Query Builder