Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

neutrinolabs Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-55639`xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityMedium
`CVE-2026-55626`xrdp: No authentication required with Xvnc backend on RHEL 9	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityHigh
`CVE-2026-55238`xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityMedium
`CVE-2026-54538`xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityHigh
`CVE-2026-44978`xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityMedium
`CVE-2026-44178`xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityHigh
`CVE-2026-55645`xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityMedium
`CVE-2026-42218`XRDP is vulnerable to a server timing attack, leading to user enumeration	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityMedium
`CVE-2026-41521`xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityHigh
`CVE-2026-41252`xrdp: lib_palette_update Heap Buffer Overflow & RCE	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published07/20/2026	SeverityCritical
`CVE-2026-35512`xrdp: Heap buffer overflow in EGFX channel	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityHigh
`CVE-2026-33689`xrdp: Pre-authentication out-of-bounds reads in channel parsers	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityHigh
`CVE-2026-33145`xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityMedium
`CVE-2026-32624`xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityMedium
`CVE-2026-33516`xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityHigh
`CVE-2026-32623`xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityHigh
`CVE-2026-32105`xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityCritical
`CVE-2026-32107`xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published04/17/2026	SeverityHigh
`CVE-2025-68670`xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published01/27/2026	SeverityCritical
`CVE-2024-39917`xrdp allows an ininite number of login attempts	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published07/12/2024	SeverityHigh
`CVE-2023-42822`Unchecked access to font glyph info in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published09/27/2023	SeverityMedium
`CVE-2023-40184`Improper handling of session establishment errors in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published08/30/2023	SeverityLow
`CVE-2022-23477`Buffer Overflow in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityCritical
`CVE-2022-23484`Integer Overflow in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityHigh
`CVE-2022-23483`Out-of-Bound Read in libxrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityHigh
`CVE-2022-23482`Out-of-Bound Read in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityInformational
`CVE-2022-23481`Out-of-Bound Read in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityInformational
`CVE-2022-23480`Buffer Overflow in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityCritical
`CVE-2022-23479`Buffer Overflow occurs in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityCritical
`CVE-2022-23478`Out of Bound Write in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityCritical
`CVE-2022-23468`Buffer Overflow in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityMedium
`CVE-2022-23493`Out of Bound Read in xrdp	Exploitation statusNot known exploited	FixNot confirmed	Affected productxrdp	Published12/09/2022	SeverityCritical
`CVE-2022-23613`Privilege escalation on xrdp	Exploitation statusNot known exploited	FixYes	Affected productxrdp	Published02/07/2022	SeverityHigh
`CVE-2020-4044`Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it	Exploitation statusNot confirmed	FixNot confirmed	Affected productxrdp	Published06/30/2020	SeverityHigh
`CVE-2017-16927`CVE-2017-16927	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/23/2017	SeverityUnknown
`CVE-2017-6967`CVE-2017-6967	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/17/2017	SeverityUnknown
`CVE-2013-1430`CVE-2013-1430	Exploitation statusNot confirmed	FixNot confirmed	Affected productxrdp before 0.9.1	Published12/16/2016	SeverityUnknown

37 / 37 Results

All vulnerabilities loaded

Security vulnerabilities from neutrinolabs

neutrinolabs

Verify to analyze this security profile

How many security vulnerabilities does neutrinolabs have?

Which neutrinolabs product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular neutrinolabs products

xrdp