Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure.Check if you run itEPSS 0.32%Oct 12, 2026
- Medium6.0FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a realloc failure.Check if you run itEPSS 0.26%Oct 12, 2026
- Medium6.1FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer ove…Check if you run itEPSS 0.46%Oct 12, 2026
- Medium6.0FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncate…Check if you run itEPSS 0.23%Oct 12, 2026
- High7.0FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fixed 64-entry keys array dur…Check if you run itEPSS 0.17%Oct 12, 2026
- Low2.1FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenate…Check if you run itEPSS 0.22%Oct 12, 2026
- High7.1FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored witho…Check if you run itEPSS 0.31%Oct 12, 2026
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…Check if you run itEPSS 0.19%Oct 12, 2026
- High7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.Check if you run itEPSS 0.24%Oct 12, 2026
- Low2.3FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sendi…Check if you run itEPSS 0.22%Oct 12, 2026
- Low2.3FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidat…Check if you run itEPSS 0.22%Oct 12, 2026
- High8.6Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in d…Check if you run itEPSS 0.32%Oct 12, 2026
- High8.6A flaw has been found in Edimax BR-6208AC 1.32.Check if you run itEPSS 0.57%Oct 12, 2026
- Low1.9A vulnerability was identified in Netcore NR268 1.7.121109.Check if you run itEPSS 0.33%Oct 12, 2026
- Low2.1hex_core decompresses registry and Erlang term API responses without size limitsCheck if you run itEPSS 0.42%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.Check if you run itEPSS 0.27%Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerCheck if you run itEPSS 0.20%Oct 12, 2026
- Medium6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.Check if you run itEPSS 0.27%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and…Check if you run itEPSS 0.21%Oct 12, 2026
- LowImproper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine ruCheck if you run itEPSS 0.33%Oct 12, 2026
- High8.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery funct…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate us…Check if you run itEPSS 0.30%Oct 12, 2026
- High8.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrat…Check if you run itEPSS 0.33%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path.Check if you run itEPSS 0.35%Oct 12, 2026