CVE Program partner

VULSec

VULSec Labs

API
CVEs, 365 days1127 all time, 5 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationVULSec Labs
RoleCNA
TypeResearcher
Reports toredhat → mitre
ScopeVulnerabilities discovered by, or reported to, VULSec Labs that are not in another CNA’s scope.
Advisorieshttps://www.vulsec.org/advisories

Latest CVEs · RSS

  • CVE-2026-30785 2026-03-05 · CVSS 8.2
    Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerabi
  • CVE-2026-30783 2026-03-05 · CVSS 4.8
    A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config ma
  • CVE-2026-30789 2026-03-05 · CVSS 5.7
    Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk
  • CVE-2026-30798 2026-03-05 · CVSS 8.2
    Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on
  • CVE-2026-30797 2026-03-05 · CVSS 9.3
    Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, confi
  • CVE-2026-30796 2026-03-05 · CVSS 6.9
    Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Window
  • CVE-2026-30795 2026-03-05 · CVSS 8.7
    Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbe
  • CVE-2026-30793 2026-03-05 · CVSS 9.3
    Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme ha
  • CVE-2026-30792 2026-03-05 · CVSS 8.3
    A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config opt
  • CVE-2026-30791 2026-03-05 · CVSS 8.7
    Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebCli
  • CVE-2026-3598 2026-03-05 · CVSS 8.7
    Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-server-pro on Windows, MacOS, Linux (Config s
  • CVE-2024-52271 2024-12-05 · CVSS 8.2
    User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flatt
  • CVE-2024-52270 2024-12-05 · CVSS 8.2
    User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Spoofing. Displayed version does not show
  • CVE-2024-52269 2024-12-04 · CVSS 8.2
    User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content th
  • CVE-2024-52275 2024-12-04 · CVSS 8.3
    Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tend
  • CVE-2024-52274 2024-12-04 · CVSS 8.3
    Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows O
  • CVE-2024-52273 2024-12-04 · CVSS 8.3
    Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows
  • CVE-2024-52272 2024-12-04 · CVSS 8.3
    Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.Th
  • CVE-2024-52277 2024-12-04 · CVSS 8.2
    User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flatte
  • CVE-2024-52276 2024-12-04 · CVSS 8.2
    User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer fl
  • CVE-2024-52043 2024-11-06 · CVSS 6.9
    Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects
  • CVE-2023-40735 2023-08-21 · CVSS 7.5
    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (Architecture flaw) allows loss

All CVE Program partners