[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110933 | 15 Oct 2026 | CVSS 4.4 | Samsung Open Source VyondUncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before… | |
| CVE-2026-110934 | 15 Oct 2026 | CVSS 4.4 | Samsung Open Source VyondImproper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before… | |
| CVE-2026-11905 | 15 Oct 2026 | CVSS 4.3 | elemntor Elementor Website Builder – more than just a page builderThe Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up… | |
| CVE-2025-68403 | 15 Oct 2026 | CVSS 4.6 | QNAP Systems Inc. QuRouterAn external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator… | |
| CVE-2025-68404 | 15 Oct 2026 | CVSS 7.5 | QNAP Systems Inc. QuRouterA time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow… | |
| CVE-2026-101302 | 15 Oct 2026 | CVSS 6.5 | FreeBSDTLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which… | Fix |
| CVE-2026-101303 | 15 Oct 2026 | CVSS 7.5 | FreeBSDThe IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6… | Fix |
| CVE-2026-101304 | 15 Oct 2026 | CVSS 7.1 | FreeBSDWhen fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the… | Fix |
| CVE-2026-101305 | 15 Oct 2026 | CVSS 8.8 | FreeBSDrenameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted… | Fix |
| CVE-2026-101306 | 15 Oct 2026 | CVSS 9.8 | FreeBSDSCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by… | Fix |
| CVE-2026-101307 | 15 Oct 2026 | CVSS 9.1 | FreeBSDWhen the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero… | Fix |
| CVE-2025-29897 | 15 Oct 2026 | CVSS 2.3 | QNAP Systems Inc. Qsync CentralA buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they… | |
| CVE-2025-66272 | 15 Oct 2026 | CVSS 6.5 | QNAP Systems Inc. Video StationA path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the… | |
| CVE-2025-66275 | 15 Oct 2026 | CVSS 6.5 | QNAP Systems Inc. Video StationA path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the… | |
| CVE-2025-29895 | 15 Oct 2026 | CVSS 2.3 | QNAP Systems Inc. Qsync CentralA NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit… | |
| CVE-2025-29896 | 15 Oct 2026 | CVSS 2.3 | QNAP Systems Inc. Qsync CentralA NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit… | |
| CVE-2026-86803 | 15 Oct 2026 | CVSS 6.5 | oceanwp Ocean ExtraThe The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to… | |
| CVE-2026-88043 | 15 Oct 2026 | CVSS 7.2 | kitae-park Mang BoardThe Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and… | |
| CVE-2026-78001 | 15 Oct 2026 | CVSS 6.4 | boldgrid Post and Page Builder by BoldGrid – Visual Drag and Drop EditorThe Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table… | |
| CVE-2026-78087 | 15 Oct 2026 | CVSS 6.4 | vektor-inc VK BlocksThe VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'linkToPost' Feature in all versions up to, and… | |
| CVE-2026-18548 | 15 Oct 2026 | CVSS 7.2 | trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing AutomationThe Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ref' parameter… | |
| CVE-2026-18557 | 15 Oct 2026 | CVSS 6.1 | 10web Photo Gallery by 10Web – Mobile-Friendly Image GalleryThe Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title'… | |
| CVE-2026-18586 | 15 Oct 2026 | CVSS 7.2 | codename065 Premium Packages – Sell Digital Products SecurelyThe Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via… | |
| CVE-2026-15090 | 15 Oct 2026 | CVSS 7.5 | jackdewey Link LibraryThe Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including… | |
| CVE-2026-15180 | 15 Oct 2026 | CVSS 6.1 | data443 Tracking Code ManagerThe Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' POST Parameter in all versions… | |
| CVE-2026-17001 | 15 Oct 2026 | CVSS 6.4 | carazo Import and export users and customersThe Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile… | |
| CVE-2026-17031 | 15 Oct 2026 | CVSS 8.1 | quadlayers Checkout Field Manager (Checkout Manager) for WooCommerceThe Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and… | |
| CVE-2026-3712 | 15 Oct 2026 | CVSS 7.3 | kiboit PhastPressThe PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the… | |
| CVE-2026-76665 | 15 Oct 2026 | CVSS 7.1 | Hewlett Packard Enterprise HPE NonStop EXPANDA security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. | |
| CVE-2026-76666 | 15 Oct 2026 | CVSS 4.7 | Hewlett Packard Enterprise HPE NonStop EXPANDA security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. | |
| CVE-2026-76667 | 15 Oct 2026 | CVSS 5.7 | Hewlett Packard Enterprise HPE NonStop EXPANDA security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. | |
| CVE-2026-14572 | 15 Oct 2026 | CVSS 6.4 | themeum Kirki – Freeform Page Builder, Website Builder & CustomizerThe Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Page Builder… | |
| CVE-2026-108587 | 15 Oct 2026 | CVSS 9.8 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizerThe 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all… | |
| CVE-2026-93483 | 15 Oct 2026 | CVSS 9.5 | ZnunyIn Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by… | |
| CVE-2026-93484 | 15 Oct 2026 | CVSS 8.6 | ZnunyZnuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of… | |
| CVE-2026-76664 | 15 Oct 2026 | CVSS 6.4 | Hewlett Packard Enterprise HPE NonStop EXPANDA security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations | |
| CVE-2026-110912 | 15 Oct 2026 | CVSS 7.1 | DragonFlyBSDIn DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the… | |
| CVE-2026-110911 | 15 Oct 2026 | CVSS 9.8 | WheelsWheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as… | |
| CVE-2026-76662 | 15 Oct 2026 | CVSS 5.9 | Hewlett Packard Enterprise HPE NonStop TELSERVA buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. | |
| CVE-2026-76663 | 15 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise HPE NonStop TELSERVA stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS. | |
| CVE-2026-110907 | 15 Oct 2026 | CVSS 7.5 | BackdropCMS BackdropBackdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or… | |
| CVE-2026-110908 | 15 Oct 2026 | CVSS 8.8 | Netgate pfSense-pkg-frrNetgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status… | |
| CVE-2026-110909 | 15 Oct 2026 | CVSS 5.0 | Wheels CLIWheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process… | |
| CVE-2026-76660 | 15 Oct 2026 | CVSS 8.7 | Hewlett Packard Enterprise HPE NonStop CIPSAMA vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. | |
| CVE-2026-76661 | 15 Oct 2026 | CVSS 7.6 | Hewlett Packard Enterprise HPE NonStop QIOMONA vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. | |
| CVE-2026-77931 | 15 Oct 2026 | CVSS 8.8 | jxxghp MoviePilotMoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious… | |
| CVE-2026-73799 | 15 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise HPE NonStop SNMP Trap MultiplexerA security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption | |
| CVE-2026-76066 | 15 Oct 2026 | CVSS 7.5 | crestalnetwork intentkitIntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the… | |
| CVE-2026-76656 | 15 Oct 2026 | CVSS 5.3 | Hewlett Packard Enterprise HPE NonStop TCP/IP UTILITIESA vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is… | |
| CVE-2026-76659 | 15 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise HPE NonStop TCP/IP UTILITIESA vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service. | |
| CVE-2026-109430 | 15 Oct 2026 | CVSS 7.5 | Ellucian WebAdvisorEllucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted… | |
| CVE-2026-110904 | 15 Oct 2026 | CVSS 5.3 | ApostropheCMSApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call. | |
| CVE-2026-0993 | 15 Oct 2026 | CVSS 7.5 | SODOLA SL902-SWTGW124ASSODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a… | |
| CVE-2026-110810 | 15 Oct 2026 | CVSS 2.8 | ggml-org whisper.cppA vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the… | |
| CVE-2026-110809 | 15 Oct 2026 | CVSS 4.3 | sgl-project SGLangA security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file… | |
| CVE-2026-110872 | 14 Oct 2026 | CVSS 5.9 | nodemailerNodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in… | |
| CVE-2026-110873 | 14 Oct 2026 | CVSS 7.1 | heymrun heymHeym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's… | |
| CVE-2026-110865 | 14 Oct 2026 | CVSS 7.1 | renovatebot renovateRenovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing… | |
| CVE-2026-110866 | 14 Oct 2026 | CVSS 4.7 | renovatebot renovateRenovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests… | |
| CVE-2026-110867 | 14 Oct 2026 | CVSS 8.5 | renovatebot renovateRenovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env… | |
| CVE-2026-110868 | 14 Oct 2026 | CVSS 8.5 | renovatebot renovateRenovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary… | |
| CVE-2026-110869 | 14 Oct 2026 | CVSS 7.5 | nodemailerNodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes… | |
| CVE-2026-110870 | 14 Oct 2026 | CVSS 5.3 | nodemailerNodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fails to strip RFC 5322 comments… | |
| CVE-2026-110871 | 14 Oct 2026 | CVSS 6.5 | Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signingNodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU… | Fix |
| CVE-2026-110858 | 14 Oct 2026 | CVSS 8.1 | gitpython-developers GitPythonGitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard inspects only keyword… | |
| CVE-2026-110859 | 14 Oct 2026 | CVSS 7.5 | gitpython-developers GitPythonGitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read arbitrary files by… | |
| CVE-2026-110860 | 14 Oct 2026 | CVSS 6.1 | gitpython-developers GitPythonGitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not… | |
| CVE-2026-110861 | 14 Oct 2026 | CVSS 3.7 | better-auth drizzle-adapterBetter Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain… | |
| CVE-2026-110862 | 14 Oct 2026 | CVSS 9.1 | better-authBetter Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other… | |
| CVE-2026-110863 | 14 Oct 2026 | CVSS 8.1 | better-auth ssoBetter Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in… | |
| CVE-2026-110864 | 14 Oct 2026 | CVSS 7.4 | better-authBetter Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated… | |
| CVE-2026-110851 | 14 Oct 2026 | CVSS 6.1 | n8n-io n8nn8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID… | |
| CVE-2026-110852 | 14 Oct 2026 | CVSS 6.3 | n8n-io n8nn8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched… | |
| CVE-2026-110853 | 14 Oct 2026 | CVSS 7.1 | n8n-io n8nn8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a… | |
| CVE-2026-110854 | 14 Oct 2026 | CVSS 8.2 | parse-community parse-serverParse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing… | |
| CVE-2026-110855 | 14 Oct 2026 | CVSS 6.5 | gitpython-developers GitPythonGitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via… | |
| CVE-2026-110856 | 14 Oct 2026 | CVSS 7.5 | gitpython-developers GitPythonGitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on… | |
| CVE-2026-110857 | 14 Oct 2026 | CVSS 7.5 | gitpython-developers GitPythonGitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs… | |
| CVE-2026-110845 | 14 Oct 2026 | CVSS 7.7 | n8n-io n8nn8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails… | |
| CVE-2026-110846 | 14 Oct 2026 | CVSS 7.0 | n8n-io n8nn8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before… | |
| CVE-2026-110847 | 14 Oct 2026 | CVSS 7.0 | n8n-io n8nn8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger hosted-chat… | |
| CVE-2026-110848 | 14 Oct 2026 | CVSS 6.0 | n8n-io n8nn8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which… | |
| CVE-2026-110849 | 14 Oct 2026 | CVSS 7.2 | n8n-io n8nn8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary… | |
| CVE-2026-110850 | 14 Oct 2026 | CVSS 7.2 | n8n-io n8nn8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow… | |
| CVE-2026-110838 | 14 Oct 2026 | CVSS 7.5 | FreeRDPFreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated… | |
| CVE-2026-110839 | 14 Oct 2026 | CVSS 7.1 | FreeRDPFreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because… | |
| CVE-2026-110840 | 14 Oct 2026 | CVSS 7.0 | n8n-io n8nn8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query… | |
| CVE-2026-110841 | 14 Oct 2026 | CVSS 6.1 | n8n-io n8nn8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body… | |
| CVE-2026-110842 | 14 Oct 2026 | CVSS 7.7 | n8n-io n8nn8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter… | |
| CVE-2026-110843 | 14 Oct 2026 | CVSS 8.2 | n8n-io n8nn8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize… | |
| CVE-2026-110844 | 14 Oct 2026 | CVSS 7.2 | n8n-io n8nn8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by… | |
| CVE-2026-110832 | 14 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force… | |
| CVE-2026-110833 | 14 Oct 2026 | CVSS 5.9 | FreeRDPFreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy… | |
| CVE-2026-110834 | 14 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending… | |
| CVE-2026-110835 | 14 Oct 2026 | CVSS 4.0 | FreeRDPFreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is… | |
| CVE-2026-110836 | 14 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU… | |
| CVE-2026-110837 | 14 Oct 2026 | CVSS 7.1 | FreeRDPFreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because… | |
| CVE-2026-107795 | 14 Oct 2026 | CVSS 7.5 | TP-Link Systems Inc. Omada Software ControllerOmada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an… | |
| CVE-2026-110807 | 14 Oct 2026 | CVSS 4.3 | sgl-project SGLangA weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file… | |
| CVE-2026-110829 | 14 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without… |
Page 51 of 168