Lucene search
+L

47 matches found

AlpineLinux
AlpineLinux
added 2026/01/14 5:47 p.m.8 views

CVE-2026-22854

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...

9.8CVSS7AI score0.00453EPSS
SaveExploits1
EUVD
EUVD
added 2026/01/14 5:47 p.m.7 views

EUVD-2026-2673

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap-buffer-overflow occurs in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound, allowing an oversized read to overwrite heap...

7.7CVSS6.4AI score0.00453EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.8 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP versions prior to 3.20.1, which stems from a drive read where the server-controlled read length is used to read file data into the IRP output stream buffer...

9.8CVSS7.4AI score0.00453EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-2932

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description A heap-buffer-overflow can occur in drive read when a server-controlled read length is used to read file data into an IRP output stream buffer without a hard upper bound. This allows an oversized re...

9.8CVSS6.7AI score0.01958EPSS
SaveExploits13References232
OSV
OSV
added 2024/06/25 12:0 a.m.7 views

UBUNTU-CVE-2024-5594

OpenVPN before 2.6.11 does not santize PUSHREPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs...

9.1CVSS7.3AI score0.00835EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2020/07/16 7:8 p.m.23 views

CVE-2020-15646

If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird sends username and password over https to a server controlled by the attacker. This...

4.3CVSS2.1AI score0.00961EPSS
SaveExploits0References4
securityvulns
securityvulns
added 2011/10/16 12:0 a.m.54 views

wget unsafe files creation

Local file is created with server controlled filename...

6.8CVSS1.6AI score0.04214EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder