CVE Vulnerability Database
Search and browse 423,905 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110838 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authenticati... |
| CVE-2026-110837 | HIGH | 7.1 | 0.3% | Oct 14, 2026 | FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in f... |
| CVE-2026-110836 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious g... |
| CVE-2026-110835 | MEDIUM | 5.8 | 0.2% | Oct 14, 2026 | FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routi... |
| CVE-2026-110834 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to ... |
| CVE-2026-110833 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR chann... |
| CVE-2026-110832 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows a... |
| CVE-2026-110831 | MEDIUM | 4.3 | 0.2% | Oct 14, 2026 | FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an ... |
| CVE-2026-110830 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server ... |
| CVE-2026-110829 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets ... |
| CVE-2026-110807 | MEDIUM | 4.3 | — | Oct 14, 2026 | A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown function... |
| CVE-2026-107795 | HIGH | 7.5 | 0.2% | Oct 14, 2026 | Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative author... |
| CVE-2026-106485 | — | — | — | Oct 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-106068 | — | — | — | Oct 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-106006 | — | — | — | Oct 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-105627 | — | — | — | Oct 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-110816 | MEDIUM | 5.3 | 0.3% | Oct 14, 2026 | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` w... |
| CVE-2026-110698 | MEDIUM | 6.3 | 0.3% | Oct 14, 2026 | A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the fil... |
| CVE-2026-110696 | MEDIUM | 5.3 | 0.4% | Oct 14, 2026 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e244... |
| CVE-2026-110695 | MEDIUM | 6.3 | 0.4% | Oct 14, 2026 | A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file ... |
| CVE-2026-108337 | HIGH | 7.4 | 0.3% | Oct 14, 2026 | An administrator could retrieve the password reset code for any user and take over the account. The password reset co... |
| CVE-2026-108336 | CRITICAL | 9.1 | 0.2% | Oct 14, 2026 | When the default self-signed certificate is used, an attacker could gain administrative access to the application. Th... |
| CVE-2026-108335 | CRITICAL | 9.1 | 0.2% | Oct 14, 2026 | When the password reset functionality is enabled, and email is configured, an attacker could take over any account using... |
| CVE-2026-102298 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenti... |
| CVE-2026-96540 | HIGH | 8.8 | 0.2% | Oct 14, 2026 | An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in ... |