CVE Vulnerability Database
Search and browse 424,280 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109957 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Im... |
| CVE-2026-109956 | HIGH | 7 | 0.3% | Oct 13, 2026 | NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.paths... |
| CVE-2026-109955 | MEDIUM | 5.3 | — | Oct 13, 2026 | Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated at... |
| CVE-2026-109954 | MEDIUM | 6.5 | — | Oct 13, 2026 | Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requ... |
| CVE-2026-109953 | MEDIUM | 5.3 | 0.2% | Oct 13, 2026 | FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin o... |
| CVE-2026-109952 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against it... |
| CVE-2026-109951 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freer... |
| CVE-2026-109950 | MEDIUM | 4.3 | 0.3% | Oct 13, 2026 | FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to ... |
| CVE-2026-109949 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartca... |
| CVE-2026-109948 | MEDIUM | 4.3 | 0.2% | Oct 13, 2026 | FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call th... |
| CVE-2026-109947 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP s... |
| CVE-2026-109946 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion,... |
| CVE-2026-109945 | MEDIUM | 5.9 | 0.2% | Oct 13, 2026 | FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONN... |
| CVE-2026-109944 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation... |
| CVE-2026-109943 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the... |
| CVE-2026-109942 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c beca... |
| CVE-2026-109941 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD ... |
| CVE-2026-109940 | MEDIUM | 4.6 | 0.1% | Oct 13, 2026 | FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName... |
| CVE-2026-109939 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/co... |
| CVE-2026-109938 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate... |
| CVE-2026-109680 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the b... |
| CVE-2026-109679 | MEDIUM | 5.3 | 0.3% | Oct 13, 2026 | FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint retu... |
| CVE-2026-109678 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachab... |
| CVE-2026-109677 | MEDIUM | 6.5 | 0.3% | Oct 13, 2026 | FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call ... |
| CVE-2026-109676 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attacke... |