CVE document archive
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
41,235 documents ·
- CVE-2026-121412freerdp: freerdp: Denial of Service via uncontrolled proxy memory consumption during DVC reassembly
- CVE-2026-121409freerdp: freerdp: Denial of Service via oversized X.224 routing token
- CVE-2026-121407freerdp: freerdp: Denial of Service via malformed remdesk channel payload
- CVE-2026-121405freerdp: FreeRDP: Denial of Service via excessive memory allocation in serial device redirection
- CVE-2026-121399freerdp: FreeRDP: Denial of service via excessive memory allocation in RD Gateway packet handling
- CVE-2026-121397freerdp: freerdp: Information disclosure via heap buffer over-read in clipboard image conversion
- CVE-2026-121395freerdp: FreeRDP: Denial of Service via RemoteFX differential decoder assertion failure
- CVE-2026-121393freerdp: freerdp: Denial of Service via crafted RemoteFX region coordinates
- CVE-2026-121389freerdp: FreeRDP: Denial of Service via malformed RDPDR device announcement
- CVE-2026-121386freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads
- CVE-2026-121259gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in JPEG 2000 decimator
- CVE-2026-120831libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
- CVE-2026-120830libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
- CVE-2026-120740hivex: hivex: Denial of Service via out-of-bounds read in big-data block processing
- CVE-2026-120651perl-cgi: perl-cgi: Denial of Service via truncated request body
- CVE-2026-120650perl-cgi: perl-cgi: Denial of Service via unenforced request and upload limits
- CVE-2026-120648perl-CGI: perl-CGI: HTML injection via unescaped comment delimiter
- CVE-2026-120647perl-cgi: perl-cgi: Content-Disposition parameter injection via unescaped double quotes in attachment filenames
- CVE-2026-120646perl-cgi: perl-cgi: Denial of Service via improper argument handling in uploadInfo
- CVE-2026-120645perl-cgi: perl-cgi: Denial of Service via unescaped regular expression injection in scrolling_list
- CVE-2026-120644perl-cgi: perl-cgi: Cookie attribute injection via unvalidated parameters
- CVE-2026-120643perl-CGI: perl-CGI: Cross-site scripting via unescaped apostrophes in generated URLs
- CVE-2026-120642perl-cgi: perl-cgi: Security feature bypass via untainted request parameters
- CVE-2026-120641perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames
- CVE-2026-120640perl-cgi: perl-cgi: Request forgery via request body parameter spoofing
- CVE-2026-120639perl-cgi: perl-cgi: HTTP header injection via improper newline validation
- CVE-2026-120638perl-cgi: perl-cgi: Open redirect via HTML entity decoding in redirect function
- CVE-2026-120637perl-cgi: perl-cgi: Parameter injection via unrecognized HTTP request method
- CVE-2026-120636perl-cgi: perl-cgi: script injection via unvalidated request URI
- CVE-2026-120635perl-CGI: perl-CGI: Security control bypass via improper multipart parsing
- CVE-2026-120634perl-cgi: perl-cgi: Information disclosure via uncleared warning buffer in persistent environments
- CVE-2026-120633perl-CGI: perl-CGI: Web cache poisoning and URL manipulation via untrusted host headers
- CVE-2026-120632perl-CGI: perl-CGI: Denial of Service via crafted multipart/related Content-Type header
- CVE-2026-120631perl-cgi: perl-cgi: Denial of Service via unescaped cookie expiration attribute
- CVE-2026-120572firefox: Incorrect boundary conditions in the Layout: Block and Inline component
- CVE-2026-120457libaec: libaec: Denial of Service via out-of-bounds read in m_se_decode()
- CVE-2026-120452libgphoto2: libgphoto2: Denial of service via oversized thumbnail processing
- CVE-2026-120437netpbm: netpbm: Denial of Service via out-of-bounds read in tgatoppm
- CVE-2026-120436netpbm: netpbm: Arbitrary code execution via integer overflow in jbigtopnm
- CVE-2026-120433netpbm: netpbm: Arbitrary code execution via crafted PICT file in picttoppm
- CVE-2026-120432netpbm: netpbm: Arbitrary code execution via integer overflow in winicontopam
- CVE-2026-120194json-glib: json-glib: infinite loop in json_path_query() with negative JSONPath slice step
- CVE-2026-120067postgresql-odbc: postgresql-odbc: Denial of Service via stack-based buffer overflow in updatable cursors
- CVE-2026-120066postgresql-odbc: postgresql-odbc: Information disclosure via insecure temporary log file creation
- CVE-2026-120065postgresql-odbc: postgresql-odbc: SQL injection via unescaped column names in updatable cursors
- CVE-2026-120062postgresql-odbc: postgresql-odbc: arbitrary SQL execution via unescaped input in SQLSpecialColumns
- CVE-2026-120061postgresql-odbc: postgresql-odbc: Memory corruption via malformed SQL escape sequences
- CVE-2026-120059postgresql-odbc: postgresql-odbc: Information disclosure via format string in column name
- CVE-2026-120058postgresql-odbc: postgresql-odbc: Arbitrary code execution via heap buffer overflow during cursor fetch
- CVE-2026-120057postgresql-odbc: postgresql-odbc: arbitrary code execution via buffer overflow in large-object read
Latest 50 identifiers shown. Year archives provide navigation through all public documents. Years follow identifiers, not publication dates.