PT-2024-41067 · Ооо 'Нпо Мир' · Scada Мир +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a vulnerability in a borrowed component of the software products. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and...

PT-2024-41077 · Ооо 'Нпо Мир' · Конфигуратор Контроллеров Мир +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the use of cryptographic algorithms containing defects. An attacker can exploit this to perform a brute force attack remotely. Recommendations: At the moment, there i...

PT-2024-40868 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Java affected versions not specified Description: A security exception crash has been reported. The crash occurs in the java.base/java.util.Arrays.copyOf function, which is called by...

PT-2024-40883 · Git +1 · Xpdf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the GfxTilingPattern class, specifically in the functions scanXObjectForBlendMode,...

PT-2024-40876 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs due to a crash in the LZWDecompresser.decompress function. The issue is related to the decompression process in the CompressedStreamStore.decompress method...

PT-2024-40890 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as ireclaim, interp reclaim, and gs main finit. No...

PT-2024-9649 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager AEM affected versions not specified Description: The issue is related to inadequate access control in the Adobe Experience Manager AEM system, which manages content and media data. Exploitation of this issue could all...

PT-2024-29545 · Sap · Sap Commerce Backoffice

Name of the Vulnerable Software and Affected Versions: SAP Commerce Backoffice affected versions not specified Description: The issue is related to the insufficient encoding of user-controlled inputs in the SAP Commerce Backoffice application, resulting in a Cross-Site Scripting XSS vulnerability...

PT-2024-29546 · Sap · Sap Permit To Work

Name of the Vulnerable Software and Affected Versions: SAP Permit to Work affected versions not specified Description: The issue allows an authenticated attacker to access information that would otherwise be restricted, causing low impact on the confidentiality of the application. There is no...

PT-2024-29703 · Unknown · Graphics Module

Name of the Vulnerable Software and Affected Versions: Graphics module affected versions not specified Description: The issue concerns uncaught exceptions in the Graphics module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment, there is no...

PT-2024-29338

Name of the Vulnerable Software and Affected Versions netbird version 0.28.4 Description The issue concerns a static initialization vector IV used in the encrypt function, allowing attackers to obtain sensitive information. This static IV is utilized in the github.com/netbirdio/netbird code...

PT-2024-38094 · Unknown · Stackposts Social Marketing Tool

Name of the Vulnerable Software and Affected Versions: Stackposts Social Marketing Tool affected versions not specified Description: The issue allows for a Cross-site Scripting XSS attack due to improper neutralization of input during web page generation. This can be exploited by submitting a...

AZL-47101 CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

AZL-47151 CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

PT-2024-10730 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Scripting XSS problem. No specific details about affected devices, real-world incidents, or technical exploitation details are provided...

PT-2024-28612 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns a memory request logic vulnerability in the memory module. Successful exploitation of this vulnerability will affect integrity and availability. Recommendations: ...

CVE-2024-31970

AdTran SRG 834-5 HDC17600021F1 devices with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1 have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with...

PT-2024-23204 · Hcl · Hcl Nomad Server

Name of the Vulnerable Software and Affected Versions: HCL Nomad server on Domino affected versions not specified Description: The issue concerns the cache of the HCL Nomad server on Domino, which contains sensitive information. This could potentially allow an attacker to acquire the sensitive...

PT-2024-40816 · Git +1 · Gpac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the function names gf vvc parse nalu bs, gf inspect dump...

PT-2024-12910 · Philips · Philips Vue Pacs

Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue concerns the use of default credentials for potentially critical functionality in Philips Vue PACS. There is no information provided about the estimated number of...