76122 matches found
PT-2026-87715
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...
PT-2026-87462
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...
CVE-2026-84197: Improper Certificate Validation
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...
PT-2026-87070
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...
PT-2026-87197
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...
PT-2026-88004
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description Improper control of code generation leads to a code injection flaw, allowing an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment,...
PT-2026-88143
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-34223: Improper Control of Generation of Code
A vulnerability has been identified in Desigo CC ClickOnce Client V6 All versions, Desigo CC ClickOnce Client V7 All versions, Desigo CC family V8 All versions, Desigo CC family V9 All versions, Desigo CC Flex Client V6 All versions, Desigo CC Flex Client V7 All versions, Desigo CC Installed Clie...
PT-2026-86959
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...
PT-2026-88442
The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag,...
PT-2026-88506
Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.37.7 n8n versions prior to 2.38.2 Description The OAuth Dynamic Client Registration endpoint fails to properly validate the size of the client name and grant types variables, while only bounding redirect uris. An...
PT-2026-87576
Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...
PT-2026-87267
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...
CVE-2026-69781: Missing Release of Memory after Effective Lifetime
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...
CVE-2026-69777: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...
PT-2026-87973
Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An integer overflow or wraparound occurs in the Remote Desktop Client, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...
CVE-2026-78463: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69572: Out-of-bounds Read
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
PT-2026-87509
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description An issue exists where the Remote Desktop Client uses an uninitialized resource. This allows an authenticated attacker with low privileges to execute arbitrary code on an...