Lucene search
+L

117244 matches found

NVD
NVD
added 2 days ago5 views

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

6.3CVSS0.00258EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago5 views

CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

5.4CVSS0.00277EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-51807

ArcadeDB before 26.7.2 fails to enforce the UPDATESCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access e.g., a...

8.5CVSS5.8AI score0.00144EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago5 views

CVE-2026-67344

ArcadeDB before 26.7.2 fails to enforce the UPDATESCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access e.g., a...

8.5CVSS5.8AI score0.00144EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 days ago5 views

CVE-2026-66401

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS5.5AI score0.00151EPSS
SaveExploits0References4
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-51831

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS5.5AI score0.00151EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago12 views

CVE-2026-67306

CVE-2026-67306 describes an out-of-bounds read in FreeRDP up to version 3.28.0 when decoding planar RLE bitmaps in libfreerdp/codec/planar.c (planar_decompress_plane_rle and planar_decompress_plane_rle_only). The 1-byte control byte is checked, but the following 0–15 attacker-declared raw bytes a...

5.4CVSS5.6AI score0.00277EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago6 views

CVE-2026-66401

CVE-2026-66401 affects FreeRDP prior to 3.29.0. The vulnerability is an out-of-bounds heap read in the UVC H.264 extension-unit parser that does not validate descriptor length before accessing the GUID field. A local attacker using a malicious USB video camera can trigger a heap read beyond alloc...

2.4CVSS5.5AI score0.00151EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago30 views

CVE-2026-66401 FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS0.00151EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-51835

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

5.4CVSS5.6AI score0.00277EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago37 views

CVE-2026-67344 ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPE

ArcadeDB before 26.7.2 fails to enforce the UPDATESCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access e.g., a...

8.5CVSS0.00144EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2 days ago6 views

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

6.3CVSS5.5AI score0.00258EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2 days ago8 views

CVE-2026-66401

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS5.5AI score0.00151EPSS
SaveExploits0
OSV
OSV
added 2 days ago5 views

CVE-2026-67344 ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPE

ArcadeDB before 26.7.2 fails to enforce the UPDATESCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access e.g., a...

8.5CVSS5.8AI score0.00144EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

8.7CVSS5.5AI score0.0035EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

5.4CVSS5.6AI score0.00277EPSS
SaveExploits0References4
CVE
CVE
added 2 days ago10 views

CVE-2026-67344

ArcadeDB before 26.7.2 is affected: ALTER TYPE operations for CUSTOM and BUCKETSELECTIONSTRATEGY do not enforce UPDATE_SCHEMA, allowing an authenticated user with only read access (e.g., a read‑only API token) to mutate a type’s custom schema metadata and bucket‑selection strategy via the HTTP co...

8.5CVSS5.8AI score0.00144EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago6 views

CVE-2026-66401 FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

2.4CVSS5.5AI score0.00151EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago13 views

CVE-2026-67291

FreeRDP vulnerability CVE-2026-67291 affects FreeRDP before 3.29.0 (versions

8.7CVSS5.7AI score0.00339EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago32 views

CVE-2026-67306 FreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

5.4CVSS0.00277EPSS
SaveExploits0References3
Rows per page
Query Builder