CWE-775

CWE-775 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-775, highest CVSS first.

  1. MEDIUM 5.3CVE-2026-103022public PoC2026-11-06

    Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request() in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-106575public PoC2026-10-07

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. T…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-110831public PoC2026-10-14

    FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious …

    AI risk analysis on Exploit-DB.ai →