Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow.Check if you run itEPSS 0.36%Oct 13, 2026
- High7.0NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths.Check if you run itEPSS 0.32%Oct 13, 2026
- Medium6.0The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in nego_process_negotiat…Check if you run itEPSS 0.26%Oct 13, 2026
- High7.1FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the client.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium5.1FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider.Check if you run itEPSS 0.15%Oct 13, 2026
- UnknownCVE-2026-109939Check if you run itEPSS 0.27%Oct 13, 2026
- High7.1Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with…Check if you run itEPSS 0.27%Oct 13, 2026
- UnknownFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliCheck if you run itEPSS 0.26%Oct 13, 2026
- UnknownMalicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)Open the advisoryOct 13, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.10%Oct 13, 2026
- UnknownMitigation bypass in the File Handling component.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium6.5Denial-of-service in the Printing: Output component.Check if you run itEPSS 0.25%Oct 13, 2026
- UnknownRace condition in the XPCOM component.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium6.5Denial-of-service in the WebRTC component.Check if you run itEPSS 0.25%Oct 13, 2026
- Medium4.3Information disclosure in the Networking component.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium5.4Use-after-free in the XML component.Check if you run itEPSS 0.23%Oct 13, 2026
- UnknownIncorrect boundary conditions in the JavaScript Engine component.Check if you run itEPSS 0.31%Oct 13, 2026
- Low2.5A flaw was found in m17n-lib.Check if you run itEPSS 0.15%Oct 13, 2026
- Unknownpyjwt vulnerabilitiesOpen the advisoryOct 13, 2026
- UnknownMalicious code in brass-common (npm)Open the advisoryOct 13, 2026
- Unknownpython315-3.15.0-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython314-3.14.8-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython313-3.13.16-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython312-3.12.15-1.1 on GA mediaOpen the advisoryOct 13, 2026