Lucene search
+L

7950 matches found

Debian CVE
Debian CVE
•added 2026/07/20 4:56 p.m.•24 views

CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS5.9AI score0.00532EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/07/20 4:56 p.m.•13 views

CVE-2026-44978 xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS5.9AI score0.00532EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/20 4:56 p.m.•18 views

CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS5.9AI score0.00532EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/20 4:56 p.m.•59 views

CVE-2026-44978

Summary: xrdp versions up to 0.10.6 contain a heap out-of-bounds read in the FIPS-specific receive paths when non-default security_layer and crypt_level are used. An unauthenticated remote attacker can trigger a denial-of-service by sending a crafted FIPS-protected PDU, via a non-default mode (se...

5.3CVSS5.9AI score0.00532EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/07/20 4:56 p.m.•14 views

CVE-2026-44978 xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS5.4AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/07/20 4:56 p.m.•19 views

EUVD-2026-46030

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS5.9AI score0.00532EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/20 4:56 p.m.•49 views

CVE-2026-44978 xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS0.00532EPSS
SaveExploits0References2
Oracle linux
Oracle linux
•added 2026/07/20 12:00 a.m.•23 views

dracut security update

107-8.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS logic on UEK with special FIPS Orabug: 38138800 Orabug: 38709306 - Include correct modprobe into squashfs root Orabug: 38559936 - Ship Oracle...

7.5CVSS7.2AI score0.03138EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/20 12:00 a.m.•7 views

CVE-2026-44978: Improper Input Validation

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

5.3CVSS5.9AI score0.00532EPSS
SaveExploits0References4
osv_oesa
osv_oesa
•added 2026/07/19 11:11 a.m.•24 views

OESA-2026-3005 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

5.9CVSS5.9AI score0.0106EPSS
SaveExploits0References3
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•55 views

CVE-2026-53715 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

5.3CVSS8.2AI score0.00467EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•47 views

CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

6.5CVSS8.2AI score0.00715EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•64 views

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

6.4CVSS8.2AI score0.00413EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•60 views

GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•56 views

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•54 views

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•62 views

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

9.1CVSS8.2AI score0.00433EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•47 views

CVE-2026-53714 vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

7.4CVSS8.2AI score0.00348EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•44 views

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/07/17 8:23 a.m.•71 views

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: datadog-agent, gitlab-operator, datadog-agent-fips, gitlab-operator-fips, tigera-operator-fips, tigera-operator...

5.8AI score
SaveExploits0
Rows per page
Query Builder