Lucene search
+L

38481 matches found

RedhatCVE
RedhatCVE
added 2026/03/06 7:45 p.m.9 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00288EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/06 7:45 p.m.14 views

CVE-2026-30791

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

8.7CVSS5.8AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/06 7:45 p.m.12 views

CVE-2026-30792

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Strategy sync, HTTP API client, config options engine modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...

9.1CVSS5.8AI score0.00265EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/05 6:31 p.m.14 views

EUVD-2026-9829

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbshttp/sync.Rs and program routine...

8.7CVSS5.9AI score0.00271EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/05 3:52 p.m.13 views

CVE-2026-30783

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Client signaling, API sync loop, config management modules allows Privilege Abuse. This vulnerability is associated with program files src/rendezvousmediator.Rs, src/hbbshttp/sync....

9.8CVSS5.8AI score0.00376EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/05 3:38 p.m.11 views

CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.9AI score
SaveExploits0References7
CVE
CVE
added 2026/03/05 3:27 p.m.36 views

CVE-2026-30795

The CVE concerns the RustDesk Client (rustdesk-client) across Windows, macOS, Linux, iOS, and Android. The vulnerability affects the Heartbeat sync loop modules, specifically the src/hbbs_http/sync.Rs code path and the Heartbeat JSON payload construction, where cleartext transmission of sensitive...

8.7CVSS5.9AI score0.00271EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/03/05 3:24 p.m.9 views

CVE-2026-30794 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure

Improper Certificate Validation vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android HTTP API client, TLS transport modules allows Adversary in the Middle AiTM. This vulnerability is associated with program files src/hbbshttp/httpclient.Rs and...

9.1CVSS5.9AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/03/05 3:21 p.m.5 views

CVE-2026-30793

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS5.9AI score0.00306EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/03/05 7:15 a.m.39 views

CVE-2026-21786 HCL Sametime for iOS is affected by sensitive information disclosure

HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URLs...

3.3CVSS0.001EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 7:15 a.m.10 views

CVE-2026-21786

HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URLs...

3.3CVSS5.9AI score0.001EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.21 views

HCL Sametime 安全漏洞

HCL Sametime is a conference solution developed by the Indian company HCL. There is a security vulnerability in HCL Sametime for iOS. This vulnerability stems from the leakage of sensitive information, which may lead to the inclusion of host name information in application logs and certain URLs...

3.3CVSS5.8AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.26 views

PT-2026-23506

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description A time-of-check-time-of-use TOCTOU issue exists in the validateScriptFileForShellBleed function. A TOCTOU issue is a software bug where a system checks a condition such as a security credential...

2.5CVSS5.8AI score0.00079EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.23 views

PT-2026-23458

Cross-Site Request Forgery CSRF vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, FFI bridge modules allows Privilege Escalation. This vulnerability is associated with program files flutter/lib/common.Dart,...

9.3CVSS5.9AI score0.00306EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2026/03/04 2:48 p.m.618 views

Exploit for Type Confusion in Apple Ipados

Coruna Exploit Kit - Deobfuscated CVE-2024-23222 HEAVILY B...

8.8CVSS7.7AI score0.10593EPSS
SaveExploits6
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.16 views

Cisco Secure Firewall Threat Defense和Cisco IOS XE Software 资源管理错误漏洞

Cisco Secure Firewall Threat Defense and Cisco IOS XE Software are both products of the American company Cisco. Cisco Secure Firewall Threat Defense is an integrated firewall platform. Cisco IOS XE Software is a network operating system. Both Cisco Secure Firewall Threat Defense and Cisco IOS XE...

5.8CVSS5.8AI score0.00454EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.26 views

Cisco IOS XE和Cisco Secure Firewall Threat Defense 安全漏洞

Cisco IOS XE and Cisco Secure Firewall Threat Defense are both products of the American company Cisco. Cisco IOS XE is an operating system. It serves as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN operations. Cisco IOS XE reduces the complexity o...

5.8CVSS5.8AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.17 views

Cisco IOS XE和Cisco Secure Firewall Threat Defense 安全漏洞

Cisco IOS XE and Cisco Secure Firewall Threat Defense are both products of the American company Cisco. Cisco IOS XE is an operating system. It serves as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN operations. Cisco IOS XE reduces the complexity o...

5.8CVSS5.8AI score0.0039EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/03 2:39 a.m.15 views

EUVD-2025-208224

Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...

5.7CVSS6AI score0.00071EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/03 2:39 a.m.4 views

CVE-2025-47147

Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...

5.7CVSS6AI score0.00071EPSS
SaveExploits0References1
Rows per page
Query Builder