https://vulnogram.org/ Most recent CVEs assigned by Securin (securin). https://vulnogram.org/seaview/icons/securin.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-105429 https://vulnogram.org/CVE-2026-105429 Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird… High Wed, 14 Oct 2026 04:33:44 GMT https://vulnogram.org/CVE-2026-107911 https://vulnogram.org/CVE-2026-107911 A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory.… High Fri, 09 Oct 2026 05:08:14 GMT https://vulnogram.org/CVE-2026-107910 https://vulnogram.org/CVE-2026-107910 An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function de… Critical Fri, 09 Oct 2026 05:08:13 GMT https://vulnogram.org/CVE-2026-107909 https://vulnogram.org/CVE-2026-107909 A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt… Critical Fri, 09 Oct 2026 05:08:12 GMT https://vulnogram.org/CVE-2026-107908 https://vulnogram.org/CVE-2026-107908 A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message… Critical Fri, 09 Oct 2026 05:08:06 GMT https://vulnogram.org/CVE-2026-7826 https://vulnogram.org/CVE-2026-7826 A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no pa… Critical Fri, 09 Oct 2026 04:04:30 GMT https://vulnogram.org/CVE-2026-7827 https://vulnogram.org/CVE-2026-7827 A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, agai… Critical Fri, 09 Oct 2026 04:04:29 GMT https://vulnogram.org/CVE-2026-5759 https://vulnogram.org/CVE-2026-5759 A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replication comma… Critical Fri, 09 Oct 2026 04:04:28 GMT https://vulnogram.org/CVE-2026-107615 https://vulnogram.org/CVE-2026-107615 An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll /… High Thu, 08 Oct 2026 13:39:59 GMT https://vulnogram.org/CVE-2026-107614 https://vulnogram.org/CVE-2026-107614 An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a wi… Medium Thu, 08 Oct 2026 13:39:58 GMT https://vulnogram.org/CVE-2026-107613 https://vulnogram.org/CVE-2026-107613 A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplicati… Medium Thu, 08 Oct 2026 13:39:56 GMT https://vulnogram.org/CVE-2026-107612 https://vulnogram.org/CVE-2026-107612 Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The… High Thu, 08 Oct 2026 13:39:55 GMT https://vulnogram.org/CVE-2026-107611 https://vulnogram.org/CVE-2026-107611 An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyond the palette allocation and crash the viewer by sending ZRLE-encoded… High Thu, 08 Oct 2026 13:39:48 GMT https://vulnogram.org/CVE-2026-44038 https://vulnogram.org/CVE-2026-44038 A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extend_test[] and extend_offset[] tables, causing incorrec… Medium Thu, 08 Oct 2026 12:55:13 GMT https://vulnogram.org/CVE-2026-44037 https://vulnogram.org/CVE-2026-44037 Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion… Medium Thu, 08 Oct 2026 12:55:12 GMT https://vulnogram.org/CVE-2026-44036 https://vulnogram.org/CVE-2026-44036 Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exh… Medium Thu, 08 Oct 2026 12:55:11 GMT https://vulnogram.org/CVE-2026-44035 https://vulnogram.org/CVE-2026-44035 Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequen… Medium Thu, 08 Oct 2026 12:55:10 GMT https://vulnogram.org/CVE-2026-44034 https://vulnogram.org/CVE-2026-44034 A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose p… Medium Thu, 08 Oct 2026 12:55:09 GMT https://vulnogram.org/CVE-2026-44033 https://vulnogram.org/CVE-2026-44033 Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted… Medium Thu, 08 Oct 2026 12:55:08 GMT https://vulnogram.org/CVE-2026-44031 https://vulnogram.org/CVE-2026-44031 Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset conta… High Thu, 08 Oct 2026 12:55:01 GMT https://vulnogram.org/CVE-2026-7840 https://vulnogram.org/CVE-2026-7840 UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_replyhdr() in repeater/webgui/webutils.c write the caller-supplied HTTP request URI into a fixed 1000-by… Critical Wed, 01 Jul 2026 03:33:28 GMT https://vulnogram.org/CVE-2026-7839 https://vulnogram.org/CVE-2026-7839 UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings2.txt is absent on first run the repeater writes the literal string "adminadmi2" as the ad… Critical Network Exploitable Wed, 01 Jul 2026 03:33:27 GMT https://vulnogram.org/CVE-2026-7838 https://vulnogram.org/CVE-2026-7838 UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing path. In vncviewer/ClientConnection.cpp, the 4-byte network-supplied reasonLen field (type CARD32) is passed a… High Wed, 01 Jul 2026 03:33:26 GMT https://vulnogram.org/CVE-2026-7831 https://vulnogram.org/CVE-2026-7831 UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the server-supplied nameLength equals exactly 2024 the code declares a 2024-byte stack buffer… High Network Exploitable Wed, 01 Jul 2026 03:33:25 GMT https://vulnogram.org/CVE-2026-7830 https://vulnogram.org/CVE-2026-7830 UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS… High Network Exploitable Wed, 01 Jul 2026 03:33:24 GMT https://vulnogram.org/CVE-2026-7829 https://vulnogram.org/CVE-2026-7829 UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225-272, after strncpy_s copies a rule token into temp1[rule1] (25-byte destination) or temp2/temp3 (16-… High Wed, 01 Jul 2026 03:33:22 GMT https://vulnogram.org/CVE-2026-7828 https://vulnogram.org/CVE-2026-7828 UltraVNC repeater through 1.8.2.2 contains an integer overflow in the HTTP request logging path. In repeater/webgui/settings.c:336, the win_log() function allocates list nodes via malloc(sizeof(struct LIST) + strlen(line)), where line is derived from… Medium Network Exploitable Wed, 01 Jul 2026 03:33:21 GMT https://vulnogram.org/CVE-2026-44040 https://vulnogram.org/CVE-2026-44040 UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to produce VNC authentication challenge bytes. In rfb/vncauth.c:119-129, the vncRandomBytes() function seeds libc rand() with time(0) + getpid() + rand() and genera… Medium Network Exploitable Wed, 01 Jul 2026 03:33:20 GMT https://vulnogram.org/CVE-2026-44041 https://vulnogram.org/CVE-2026-44041 UltraVNC through 1.8.2.2 contains an out-of-bounds read in the wide-string to multibyte conversion helper. In rfb/dh.cpp:204, the vncWc2Mb() function passes a caller-supplied WCHAR pointer to wcslen() before any bounds check. If the caller provides a… Medium Wed, 01 Jul 2026 03:33:19 GMT https://vulnogram.org/CVE-2026-44042 https://vulnogram.org/CVE-2026-44042 UltraVNC repeater through 1.8.2.2 contains an off-by-one error in the Base64 decode helper used for HTTP Basic authentication. In repeater/webgui/webutils.c:817, the wi_uudecode() function checks whether the input length exceeds the output buffer wit… Low Network Exploitable Wed, 01 Jul 2026 03:33:07 GMT https://vulnogram.org/CVE-2026-14191 https://vulnogram.org/CVE-2026-14191 An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply… High Wed, 01 Jul 2026 02:41:39 GMT https://vulnogram.org/CVE-2024-47097 https://vulnogram.org/CVE-2024-47097 Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the site parameter of handleloginform.do. Medium Network Exploitable Thu, 28 May 2026 08:25:56 GMT https://vulnogram.org/CVE-2024-47096 https://vulnogram.org/CVE-2024-47096 Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the showSupportExpiredMessage parameter of handleloginform.do. Medium Network Exploitable Thu, 28 May 2026 08:25:47 GMT https://vulnogram.org/CVE-2026-7837 https://vulnogram.org/CVE-2026-7837 A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker to cause limited data modification under specific race conditions. Low Thu, 21 May 2026 08:14:44 GMT https://vulnogram.org/CVE-2026-44075 https://vulnogram.org/CVE-2026-44075 A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in unintended session option handling that may allow a remote attacker to c… Low Thu, 21 May 2026 08:14:41 GMT https://vulnogram.org/CVE-2026-44074 https://vulnogram.org/CVE-2026-44074 Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions… Low Thu, 21 May 2026 08:14:38 GMT https://vulnogram.org/CVE-2026-44071 https://vulnogram.org/CVE-2026-44071 Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of service via memory errors that would otherwise be caught… Low Thu, 21 May 2026 08:14:35 GMT https://vulnogram.org/CVE-2026-44057 https://vulnogram.org/CVE-2026-44057 A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via… Low Thu, 21 May 2026 08:14:31 GMT https://vulnogram.org/CVE-2026-7836 https://vulnogram.org/CVE-2026-7836 An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification via crafted hexadecimal input. Low Thu, 21 May 2026 07:35:13 GMT https://vulnogram.org/CVE-2026-7835 https://vulnogram.org/CVE-2026-7835 A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrect format string processing. Low Thu, 21 May 2026 07:35:10 GMT https://vulnogram.org/CVE-2026-44076 https://vulnogram.org/CVE-2026-44076 Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path. Medium Thu, 21 May 2026 07:35:08 GMT https://vulnogram.org/CVE-2026-44073 https://vulnogram.org/CVE-2026-44073 Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions. Medium Thu, 21 May 2026 07:35:06 GMT https://vulnogram.org/CVE-2026-44072 https://vulnogram.org/CVE-2026-44072 Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unintended commands or cause a minor service disruption under specific conditions. Low Thu, 21 May 2026 07:35:04 GMT https://vulnogram.org/CVE-2026-44070 https://vulnogram.org/CVE-2026-44070 An unbounded memory reallocation in the charset conversion code in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted character conversion requests. Low Thu, 21 May 2026 07:35:02 GMT https://vulnogram.org/CVE-2026-44069 https://vulnogram.org/CVE-2026-44069 An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cause a minor service disruption via crafted volume translation input. Low Thu, 21 May 2026 07:34:59 GMT https://vulnogram.org/CVE-2026-44068 https://vulnogram.org/CVE-2026-44068 Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended metadata namespace via crafted EA names. High Thu, 21 May 2026 07:34:57 GMT https://vulnogram.org/CVE-2026-44067 https://vulnogram.org/CVE-2026-44067 A heap over-read in extended attribute (EA) header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or cause a minor service disruption via crafted EA data. Low Thu, 21 May 2026 07:34:55 GMT https://vulnogram.org/CVE-2026-44066 https://vulnogram.org/CVE-2026-44066 Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption. High Thu, 21 May 2026 07:34:53 GMT https://vulnogram.org/CVE-2026-44065 https://vulnogram.org/CVE-2026-44065 An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data. Low Thu, 21 May 2026 07:34:51 GMT https://vulnogram.org/CVE-2026-44064 https://vulnogram.org/CVE-2026-44064 An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of service via a crafted ASP request. High Thu, 21 May 2026 07:34:49 GMT