CVE-2024-35293

An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS...

PT-2024-18664 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is being actively exploited. No further details are available about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the moment, there i...

EUVD-2024-18182

A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper management of resources during fragment...

PT-2024-37490

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The Bluetooth HCI has an issue with improper discarding in adv ext report. This issue affects the Bluetooth protocol. There is no information available about the estimated number of...

PT-2024-37121

Name of the Vulnerable Software and Affected Versions: BT affected versions not specified Description: The BT encryption procedure host has a vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

PT-2024-18647 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software for various Cisco Network Convergence System NCS platforms affected versions not specified Description: A vulnerability in the handling of specific Ethernet frames could allow an unauthenticated, adjacent attacker to cau...

PT-2024-30278 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A potential issue has been identified, with a reference to an external link for more information. No details are provided about the nature of th...

PT-2024-6124 · Atlassian · Bamboo Server +1

Name of the Vulnerable Software and Affected Versions: Bamboo Data Center and Server versions 9.1.0 through 9.6.0 Description: The issue is related to insufficient input validation, allowing an authenticated attacker to execute arbitrary code, which has a high impact on confidentiality, integrity...

PT-2024-5696 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to a use-after-free vulnerability in the WinSock driver of Windows operating systems. This could allow an attacker to elevate thei...

PT-2024-27887 · Microsoft · Azure Connected Machine Agent

Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Connected Machine Agent. There is no information provided about the estimated number of...

PT-2024-25069 · Qualcomm · Snapdragon +169

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs when parsing the ML IE in a beacon, where the length field inside the common info of ML IE is greater than the ML IE length, resulting ...

CVE-2024-4708

mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...

PT-2024-20562 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Parsing a corrupt or malicious image with invalid color indices can cause a panic. There is no information provided about the estimated number of...

PT-2024-19029 · Gigadevice · Gd32E103C8T6

Name of the Vulnerable Software and Affected Versions: GigaDevice GD32E103C8T6 devices affected versions not specified Description: The issue is related to Incorrect Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2024-4328

Name of the Vulnerable Software and Affected Versions VMware vCenter Server affected versions not specified Description The vCenter Server has multiple local privilege escalation issues stemming from a misconfiguration of sudo. An authenticated local user with non-administrative privileges can...

PT-2024-26967 · Verint · Verint

Name of the Vulnerable Software and Affected Versions: Verint affected versions not specified Description: The issue concerns an unrestricted upload of a file with a dangerous type, classified as CWE-434. This could potentially allow an attacker to upload malicious files, leading to various...

PT-2024-26892 · Unknown · Wrc-X5400Gsa-B

Name of the Vulnerable Software and Affected Versions: WRC-X5400GS-B versions 1.0.10 and earlier WRC-X5400GSA-B versions 1.0.10 and earlier Description: The issue allows a network-adjacent attacker with administrative privilege to execute arbitrary OS commands by sending a specially crafted reque...

PT-2024-23474 · Upqode · Upqode Whizzy

Name of the Vulnerable Software and Affected Versions: UPQODE Whizzy versions 1.1.18 and earlier Description: A Missing Authorization issue affects the software, potentially allowing unauthorized access. The estimated number of affected devices is not specified. There is no information about...

多款TP-LINK产品 安全漏洞

The TP-LINK TL-R473GP-AC is an all-in-one Gigabit VPN router from China P&L TP-LINK. A security vulnerability exists in multiple TP-LINK products, which stems from a vulnerability that allows an attacker to hijack TCP sessions, potentially resulting in a denial-of-service attack. The following...

PT-2024-4426 · Apache · Apache Ofbiz

Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 18.12.14 Description: The issue affects Apache OFBiz due to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This vulnerability may allow a remote...