Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths.Check if you run itEPSS 0.28%Oct 13, 2026
- High7.1FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementation, which stores the PIN re…Open the advisoryOct 13, 2026
- Medium5.3FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.1FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized d…Check if you run itEPSS 0.27%Oct 13, 2026
- Medium6.0FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrent…Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points arr…Check if you run itEPSS 0.27%Oct 13, 2026
- Medium5.4When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time claim in the resulting ID token against the request…Check if you run itEPSS 0.21%Oct 13, 2026
- Medium5.3When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request…Check if you run itEPSS 0.28%Oct 13, 2026
- Medium6.1The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL.Check if you run itEPSS 0.22%Oct 13, 2026
- High7.1FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by sending incomplete…Check if you run itEPSS 0.27%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium6.0FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body.Check if you run itEPSS 0.25%Oct 13, 2026
- UnknownFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliCheck if you run itEPSS 0.26%Oct 13, 2026
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.36%Oct 13, 2026
- High7.1AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access.Check if you run itEPSS 0.11%Oct 13, 2026
- High8.2AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.3AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- UnknownMalicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)Open the advisoryOct 13, 2026
- Medium5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.37%Oct 13, 2026
- Medium5.5A vulnerability was determined in conductor-oss conductor up to 3.32.5.Check if you run itEPSS 0.35%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read.Check if you run itEPSS 0.12%Oct 13, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.41%Oct 13, 2026