28166 matches found
SUSE CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in driveprocessirpcreate, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...
CodeWithCJ SparkyFitness command injection vulnerability
Versions of CodeWithCJ SparkyFitness prior to 1.6.0 have a command injection vulnerability. This vulnerability arises from the API/admin/backup/restore endpoints interpolating the names of uploaded files into shell commands. Certified global administrators can upload recovery archives whose file...
Astra Linux – Vulnerability in WebKit2GTK
The issue was resolved through improved bounds checks. This issue has been fixed in tvOS 15.6, watchOS 8.7, iOS 15.6, and iPadOS 15.6, macOS Monterey 12.5, and Safari 15.6. Processing web content may lead to arbitrary code execution...
Astra Linux – Vulnerability in WebKit2GTK
There was an issue with URL handling that caused spoofing. This issue has been addressed through improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may result in address bar spoofing...
Astra Linux – vulnerability in webkit2gtk
The issue has been resolved through improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2, iPadOS 17.2, and macOS Sonoma 14.2. Processing web content may result in a denial-of-service condition...
Astra Linux – vulnerability in PostgreSQL 11
A flaw was found in the psql interactive terminal of PostgreSQL in versions prior to 13.1, prior to 12.5, prior to 11.10, prior to 10.15, prior to 9.6.20, and prior to 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as...
Astra Linux – vulnerability in Chromium
In Google Chrome on OS X prior to 87.0.4280.88, using “After Free” in media allowed remote attackers to potentially exploit heap corruption via a specially crafted HTML page...
ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root
Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
UBUNTU-CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in driveprocessirpcreate, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...
DEBIAN-CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in driveprocessirpcreate, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...
CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in driveprocessirpcreate, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...
CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in driveprocessirpcreate, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...
CVE-2026-86002
Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...
Nutanix Acropolis Operating System Authorization Vulnerability
Nutanix Acropolis Operating System versions prior to 7.3.1.18, 7.5 up to 7.5.2, and 7.6 up to 7.6.0.8 have an authorization vulnerability. This vulnerability stems from improper configuration of the authentication filter. Unauthenticated remote attackers can bypass authentication by constructing...
PT-2026-114145
Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.13.0 through 3.31.0 Description A resource retention flaw exists in the drive process irp create function. The issue occurs when an opened local file is registered in the drive dictionary before the allocation size is applie...
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5128928)
2026-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 KB5128928...
2026-10 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5126655)
2026-10 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5126655...
Yiyi Wang Crossnote Code Injection Vulnerability
Yiyi Wang’s Crossnote versions prior to 0.8.29 have a code injection vulnerability. This vulnerability stems from the use of vm.runInNewContext in the .crossnote/config.js and .crossnote/parser.js files, which lack a secure boundary with the Node.js host domain. Opening Markdown files from...
TR7 Cyber Defense TR7 ASP Command Injection Vulnerability
Versions of TR7 Cyber Defense TR7 ASP from 1.0.40.236 to 1.0.1554.2331 and from 1.6.42.239 to 1.6.1554.2331 have a command injection vulnerability. This vulnerability stems from improper handling of special elements used in operating system commands, which may lead to command injection attacks...