Lucene search
+L

26530 matches found

RedhatCVE
RedhatCVE
added 2 days ago4 views

CVE-2026-64620

A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...

9.8CVSS6.3AI score0.00578EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

Amazon Corretto Java 11.x < 11.0.32.9.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is 11 prior to 11.0.32.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-11-2026-Jul-21 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

7.5CVSS5.5AI score0.00441EPSS
SaveExploits1References11
NVD
NVD
added 3 days ago7 views

CVE-2026-64620

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.8CVSS0.00578EPSS
SaveExploits0References3
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-64620 FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.8CVSS0.00578EPSS
SaveExploits0References3
OSV
OSV
added 3 days ago3 views

CVE-2026-64620 FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common

FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...

9.3CVSS5.8AI score0.00578EPSS
SaveExploits0References5
NVD
NVD
added 4 days ago5 views

CVE-2026-64117

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb-cb ieee80211invokefastrx reads RX status through IEEE80211SKBRXCBskb, which aliases the same skb-cb storage that ieee80211rxmeshdata reuses as IEEE80211TXINFO. In the...

8.8CVSS0.00234EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago7 views

EUVD-2026-45179

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

6.4CVSS5.2AI score0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
added 6 days ago43 views

CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS

The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...

5.1CVSS0.00102EPSS
SaveExploits0References1
CVE
CVE
added last week19 views

CVE-2026-44453

The CVE-2026-44453 entry concerns the h2o HTTP server (HTTP/1.x, HTTP/2, HTTP/3). Before commit 6b5370d, h2o could trigger a Denial of Service by calling alloca to build file paths for static files, potentially allocating up to ~600 KB on the stack. This exceeds the musl libc pthread stack defaul...

7.5CVSS6AI score0.00278EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/16 2:35 p.m.8 views

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

6.4CVSS6.7AI score0.00292EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/16 2:35 p.m.7 views

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

7.5CVSS7.1AI score0.00728EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/16 2:35 p.m.7 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

7.5CVSS6.9AI score0.00615EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/15 5:39 p.m.5 views

GHSA-3PVH-63GF-J9MW LangBot: Authenticated RCE Via MCP Configuration

Summary Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the MCP Server Configuration by added an "STDIO" MCP with an arbitrary command. Details The repository uses StdioServerParameters which is based on Anthropic's modelcontextprotocol open...

8.8CVSS6.6AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/15 3:58 p.m.9 views

kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

6AI score0.00174EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/15 3:38 p.m.8 views

EUVD-2026-44704

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, an authenticated user with a standard operational role can trigger server-side template injection through a configuration field, resulting in unauthorized disclosure of data outside the user's norm...

8.8CVSS6.1AI score0.00136EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/15 9:55 a.m.8 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

7.5CVSS7AI score0.00615EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/15 12:0 a.m.32 views

CVE-2026-30618

xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling. A remote attacker can access the publicly exposed MCP management interface and configure an MCP STDIO server with attacker-controlled commands and parameters, resulti...

0.01671EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/14 9:41 p.m.4 views

JLSEC-2026-739 AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were...

AES-GCM encryption/decryption with extremely large cumulative single message sizes 64 GiB were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery...

7.5CVSS6.1AI score0.00114EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/14 9:41 p.m.5 views

JLSEC-2026-729 wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM...

wolfSSL's wcPKCS7DecodeAuthEnvelopedData does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can therefore truncate the mac field from 16 bytes to 1 byte, reducing the tag check from 2⁻¹²⁸ to 2⁻⁸...

8.7CVSS6.1AI score0.00355EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/14 9:41 p.m.4 views

JLSEC-2026-750 Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1...

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate processing...

4.3CVSS6.1AI score0.00074EPSS
SaveExploits0References5
Rows per page
Query Builder