Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2026-121416
    Fix available
    Packages

    Summary

    SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations

    Published
    3 Nov 2026
    CVE-2026-121415
    Fix available
    Packages

    Summary

    Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key

    Published
    3 Nov 2026
    CVE-2026-121414
    Fix available
    Packages

    Summary

    Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update

    Published
    3 Nov 2026
    CVE-2026-121413
    Fix available
    Packages

    Summary

    Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession

    Published
    3 Nov 2026
    CVE-2026-121412
    Fix available
    Packages

    Summary

    FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

    Published
    3 Nov 2026
    CVE-2026-121411
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

    Published
    3 Nov 2026
    CVE-2026-121410
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

    Published
    3 Nov 2026
    CVE-2026-121409
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

    Published
    3 Nov 2026
    CVE-2026-121408
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control Channel

    Published
    3 Nov 2026
    CVE-2026-121407
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

    Published
    3 Nov 2026
    CVE-2026-121406
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX Payload

    Published
    3 Nov 2026
    CVE-2026-121405
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device Control

    Published
    3 Nov 2026
    CVE-2026-121404
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA

    Published
    3 Nov 2026
    CVE-2026-121403
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRP

    Published
    3 Nov 2026
    CVE-2026-121402
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics

    Published
    3 Nov 2026
    CVE-2026-121401
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet

    Published
    3 Nov 2026
    CVE-2026-121400
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet

    Published
    3 Nov 2026
    CVE-2026-121399
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet Length

    Published
    3 Nov 2026
    CVE-2026-121398
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump Module

    Published
    3 Nov 2026
    CVE-2026-121397
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()

    Published
    3 Nov 2026
    CVE-2026-121396
    Fix available
    Packages

    Summary

    FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertion

    Published
    3 Nov 2026
    CVE-2026-121395
    Fix available
    Packages

    Summary

    FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX Decoder

    Published
    3 Nov 2026
    CVE-2026-121394
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder

    Published
    3 Nov 2026
    CVE-2026-121393
    Fix available
    Packages

    Summary

    FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region Assertion

    Published
    3 Nov 2026
    CVE-2026-121392
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate

    Published
    3 Nov 2026
    CVE-2026-121391
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATE

    Published
    3 Nov 2026
    CVE-2026-121390
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response

    Published
    3 Nov 2026
    CVE-2026-121389
    Fix available
    Packages

    Summary

    FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement Logging

    Published
    3 Nov 2026
    CVE-2026-121388
    Fix available
    Packages

    Summary

    FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST

    Published
    3 Nov 2026
    CVE-2026-121387
    Fix available
    Packages

    Summary

    FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 Decoder

    Published
    3 Nov 2026
    CVE-2026-121386
    Fix available
    Packages

    Summary

    FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers

    Published
    3 Nov 2026
    CVE-2026-121513
    Fix available
    Packages

    Summary

    Out-of-bounds Write in µD3TN

    Published
    3 Nov 2026
    CVE-2026-121512
    Fix available
    Packages

    Summary

    Missing Release of Memory after Effective Lifetime in µD3TN

    Published
    3 Nov 2026
    CVE-2026-121511
    Fix available
    Packages

    Summary

    Out-of-bounds Read in µD3TN

    Published
    3 Nov 2026
    CVE-2026-121510
    Fix available
    Packages

    Summary

    Out-of-bounds Write in µD3TN

    Published
    3 Nov 2026
    CVE-2026-121508
    Fix available
    Packages

    Summary

    Use After Free in µD3TN

    Published
    3 Nov 2026
    CVE-2026-121507
    Fix available
    Packages

    Summary

    Double Free in µD3TN

    Published
    3 Nov 2026
    CVE-2026-121506
    Fix available
    Packages

    Summary

    Out-of-bounds Write in NTPsec

    Published
    3 Nov 2026
    CVE-2026-121505
    Fix available
    Packages

    Summary

    Out-of-bounds Read in NTPsec

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-119742
    No fix available
    Packages

    nagios3, icinga, icinga, nagios3, nagios4, nagios4, nagios4, nagios4, nagios4

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-120572
    No fix available
    Packages

    mozjs52, mozjs38, mozjs68, mozjs52, mozjs102, mozjs78, mozjs91, thunderbird, mozjs102, mozjs115

    Summary

    Published
    3 Nov 2026
    Packages

    io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-handler, io.netty:netty-handler-proxy, io.netty:netty-resolver-dns, io.netty:netty-transport-sctp

    Summary

    TuxCare security update for io.netty (12 CVEs)

    Published
    3 Nov 2026
    USN-8971-1
    Fix available
    Packages

    gnome-shell, gnome-shell, gnome-shell

    Summary

    gnome-shell vulnerability

    Published
    3 Nov 2026
    CGA-jm79-hqp9-fmwx
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026
    CGA-cv8r-fj6x-6xv7
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026
    CGA-prw6-6p53-g6vv
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026
    CGA-5pgq-237q-55w2
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026
    CGA-2r32-2rf5-j727
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026
    CGA-jjvv-prm4-6rfh
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026
    CGA-xchq-g2v5-h6w9
    Fix available
    Packages

    jenkins-2.580

    Summary

    Published
    3 Nov 2026