69499 matches found
PT-2026-88143
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-87178
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
CVE-2026-72936: Use After Free
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69777: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-69781: Missing Release of Memory after Effective Lifetime
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...
PT-2026-88316
Name of the Vulnerable Software and Affected Versions ConnectWise ScreenConnect versions prior to 26.6.5 Description A flaw in the ScreenConnect client allows files to be transferred and executed through an active remote session without authorization or host confirmation under certain...
CVE-2026-84197: Improper Certificate Validation
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...
PT-2026-88447
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node 1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false...
PT-2026-87130
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...
PT-2026-86959
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...
CVE-2026-66305: Use of Client-Side Authentication
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
PT-2026-87576
Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...
CVE-2026-69572: Out-of-bounds Read
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
PT-2026-88033
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which could allow an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overfl...
PT-2026-88438
Name of the Vulnerable Software and Affected Versions Okta Hyperdrive Integration affected versions not specified Description The installer fails to mask the OAuth client secret when it is passed as an MSI property. This results in the credential being recorded in plaintext within the installer...
PT-2026-87267
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...
ALSA-2026:64808 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...
CVE-2026-69358: Use of Uninitialized Resource
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...