آخرین آسیب‌پذیری‌ها

FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt

FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext

FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec

FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close

FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability

FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event

FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap

SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller

Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account

SPIP before 4.4.29 Authenticated SQL Injection via where Parameter

Reflected XSS via client window id in URL client window mode

Git for Windows: git-credential-wincred Erase Path Heap Overflow

Git for Windows: git-credential-wincred OAuth Store Heap Overflow

Oqtane Framework before 10.3.0 SSRF via File Upload From URL

Oqtane Framework before 10.3.0 Broken Access Control via SettingController

WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results

WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func

SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile

SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position

Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping