168869 matches found
CVE-2026-66402
A flaw was found in FreeRDP. This flaw involves multiple weaknesses in how FreeRDP validates TLS Transport Layer Security certificates. FreeRDP's custom validation logic can incorrectly process DNS Subject Alternative Name SAN values, accept Common Names without proper comparison to other SAN...
CVE-2026-0392 eParakstītājs 3.0 for Windows – remote code execution via unauthenticated auto-update
eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected. On each launch the application fetches an update descriptor XML over TLS but accepts any TLS certificate a permissive TrustManager and ...
CVE-2026-68742
The CVE-2026-68742 entry concerns SSSD’s NSS responder. The root cause is that sss_nss_protocol_parse_addr() does not validate the addrlen field against the remaining packet size, enabling a crafted GETHOSTBYADDR request to trigger an out-of-bounds read and crash the process, causing denial of se...
frr: FRRouting: Denial of Service via crafted BGP UPDATE message
A flaw was found in FRRouting FRR. Missing input validation in the rfapiRibBi2Ri function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This vulnerability can disrupt network services managed by FRR...
CVE-2026-21554
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21555
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21553
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21550
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21552
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21549
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21548
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed...
CVE-2026-21551
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-12259
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
UBUNTU-CVE-2026-12259
In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...
CVE-2026-21555
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
EUVD-2026-52220
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21555
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2026-21555
CVE-2026-21555 affects the modem component and is caused by improper input validation. The impact is a remote denial of service without additional privileges, with a CVSS v3.1 base score of 7.5 (HIGH) and network attack vector, low attack complexity, no user interaction, and an unchanged scope. T...