Lucene search
K

290 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/14 5:56 p.m.5 views

CVE-2026-22858

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...

9.1CVSS5.6AI score0.00115EPSS
Exploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2026/01/14 5:56 p.m.2 views

CVE-2026-22858

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...

9.1CVSS7AI score0.00115EPSS
Exploits1
Debian CVE
Debian CVE
added 2026/01/14 5:56 p.m.2 views

CVE-2026-22858

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...

9.1CVSS5.3AI score0.00115EPSS
Exploits1
Cvelist
Cvelist
added 2026/01/14 5:56 p.m.18 views

CVE-2026-22858 FreeRDP has a global-buffer-overflow in crypto_base64_decode

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...

6.1CVSS0.00115EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/14 5:56 p.m.1 views

EUVD-2026-2669

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The root cause appears to be implementation-defined char signedness: on Arm/AArch64 builds, plain char is treated as unsigned, so the guard c = ...

6.1CVSS6.4AI score0.00115EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-22858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, global-buffer-overflow was observed in FreeRDP's Base64 decoding path. The roo...

9.1CVSS5.8AI score0.00115EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.1 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in versions prior to FreeRDP 3.20.1, which stems from a global buffer overflow in the Base64 decoding path that could lead to out-of-bounds access...

9.1CVSS7.5AI score0.00115EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.2 views

CVE-2026-22697

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is...

7.5CVSS8AI score0.0019EPSS
Exploits1References1
NVD
NVD
added 2026/01/10 1:16 a.m.2 views

CVE-2026-22697

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is...

7.5CVSS0.0019EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/10 12:31 a.m.2 views

EUVD-2026-1888

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is...

7.5CVSS7.5AI score0.0019EPSS
Exploits1References2
CVE
CVE
added 2026/01/10 12:31 a.m.6 views

CVE-2026-22697

CryptoLib (SDLS-EP) prior to version 1.4.3 is affected by a heap buffer overflow in the KMC crypto service integration during Base64 decoding of ciphertext/cleartext fields. The decoder uses an expected output length to size the destination buffer, but actually writes based on input length and do...

7.5CVSS7.7AI score0.0019EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2026/01/10 12:0 a.m.2 views

CryptoLib 安全漏洞

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.4.3 that stems from a failure to enforce target size limits during Base64 decoding, which...

7.5CVSS7.5AI score0.0019EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/10 12:0 a.m.3 views

PT-2026-2247

Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3 Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP for secure communication between spacecraft and ground stations. Versions prior ...

7.5CVSS7.6AI score0.0019EPSS
Exploits1References8
CVE
CVE
added 2025/10/16 12:0 a.m.5 views

CVE-2025-60641

CVE-2025-60641 affects Vfront 0.99.52. The issue is a vulnerable call in mexcel.php that does unserialize(base64_decode($_POST['mexcel'])) on user-controlled input, decoded from base64 and deserialized without validation or allowed_classes. This allows injection of arbitrary PHP objects, with pot...

6.5CVSS7.7AI score0.0018EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/08 6:18 p.m.3 views

CVE-2025-11346

A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....

9.8CVSS6.9AI score0.00093EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-30293

Malware in sbrugna...

7.5CVSS7.5AI score0.00299EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-0550

Malware in sbrugna...

9.8CVSS9.1AI score0.02278EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-10418

Malware in sbrugna...

9.8CVSS9.5AI score0.0025EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-1799

Malware in sbrugna...

5CVSS9.3AI score0.01382EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-7462

Malware in sbrugna...

8.5CVSS6.5AI score0.00392EPSS
Exploits0References3
Rows per page
Query Builder