Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images.Check if you run itEPSS 0.38%Oct 12, 2026
- Medium6.3ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails d…Check if you run itEPSS 0.37%Oct 12, 2026
- Medium6.3ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails.Check if you run itEPSS 0.37%Oct 12, 2026
- High8.2FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure.Check if you run itEPSS 0.39%Oct 12, 2026
- Medium6.0FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a realloc failure.Check if you run itEPSS 0.31%Oct 12, 2026
- Medium6.1FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer ove…Check if you run itEPSS 0.54%Oct 12, 2026
- Medium6.0FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncate…Check if you run itEPSS 0.29%Oct 12, 2026
- Medium6.0FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowS…Check if you run itEPSS 0.29%Oct 12, 2026
- High7.0FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fixed 64-entry keys array dur…Check if you run itEPSS 0.25%Oct 12, 2026
- Low2.1FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenate…Check if you run itEPSS 0.29%Oct 12, 2026
- High7.1FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored witho…Check if you run itEPSS 0.38%Oct 12, 2026
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.Check if you run itEPSS 0.29%Oct 12, 2026
- Low2.3FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sendi…Check if you run itEPSS 0.22%Oct 12, 2026
- Low2.3FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidat…Check if you run itEPSS 0.27%Oct 12, 2026
- High8.6Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in d…Check if you run itEPSS 0.32%Oct 12, 2026
- High8.6A flaw has been found in Edimax BR-6208AC 1.32.Check if you run itEPSS 0.57%Oct 12, 2026
- Low1.9A vulnerability was identified in Netcore NR268 1.7.121109.Check if you run itEPSS 0.20%Oct 12, 2026
- Low2.1hex_core decompresses registry and Erlang term API responses without size limitsCheck if you run itEPSS 0.45%Oct 12, 2026
- High7.1Improper XML external entity restriction in Progress MarkLogic ServerCheck if you run itEPSS 0.27%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.Check if you run itEPSS 0.27%Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerCheck if you run itEPSS 0.20%Oct 12, 2026
- Medium6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.Check if you run itEPSS 0.27%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and…Check if you run itEPSS 0.28%Oct 12, 2026
Sort