75961 matches found
PT-2026-111868
Name of the Vulnerable Software and Affected Versions Distribution versions prior to 3.1.2 Description The registry/client.manifests.Get function reads a manifest for a digest-pinned request and passes it to distribution.UnmarshalManifest without verifying the body against the requested digest...
PT-2026-112726
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description An out-of-bounds read exists in the Remote Desktop Client, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs whe...
PT-2026-111138
Name of the Vulnerable Software and Affected Versions sap-cloud-sdk versions prior to 0.45.2 Description The SAP Cloud SDK for Python contains a Server-Side Request Forgery SSRF issue affecting multi-tenant SAP Business Technology Platform BTP applications. An attacker who controls the tenant...
PT-2026-112227
Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows Client for NFS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer...
PT-2026-112195
Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network. A heap-based...
PT-2026-111582
Name of the Vulnerable Software and Affected Versions Gotify server versions prior to 3.0.0 Description The password change endpoint 'POST /current/user/password' allows a user to change their password using only a valid client token. It does not require the current password or any additional...
Microsoft Windows: CVE-2026-85337: Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-69955: Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-69940: Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...
CVE-2026-85337: Out-of-bounds Read
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97789: Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-112503
Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A stack-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A stack-based buffer...
CVE-2026-83580: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70113: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
CVE-2026-97789: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69998: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69996: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-70012: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Ubuntu 24.04 LTS : curl vulnerability (USN-8670-1)
The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8670-1 advisory. Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client...