PT-2024-40805 · Git +1 · Gpac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions gf hevc parse nalu bs, gf inspect dump nalu internal, and inspect...

PT-2024-19461 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A bounty was awarded to an individual for exploiting a specific issue using an Exploiter tool. Recommendations: At the moment, there is no...

PT-2024-4784 · Microsoft · Windows Enroll Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Enroll Engine affected versions not specified Description: The issue is related to errors in cryptographic signature verification in the Windows Enroll Engine component of Windows operating systems. This allows an attacker to bypass...

PT-2024-4773 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. There is no information provided about the...

CVE-2024-6441 ORIPA LoaderXML.java deserialization

A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely...

PT-2024-13016 · Kiloview · P1/P2

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses. Recommendations: At the...

PT-2024-13013 · Kiloview · P1/P2 +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A Cross-site Scripting XSS vulnerability has been discovered, characterized by improper input neutralization during web page generation. This...

PT-2024-6690 · Advantech · Adam-5630

Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 affected versions not specified Description: The issue is related to the transmission of user credentials in plain text between the device and the user source device during the login process. This is due to the use of weak...

PT-2024-20562 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Parsing a corrupt or malicious image with invalid color indices can cause a panic. There is no information provided about the estimated number of...

AZL-42916 CVE-2024-6104 affecting package cert-manager for versions less than 1.11.2-12

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

PT-2024-20445

Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description The issue concerns the use of the SHA-1 hashing algorithm to compute password hashes, which allows attackers to determine cleartext passwords with brute-force attacks due to the inherent speed...

PT-2024-20443

Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description A security issue has been identified, allowing authenticated attackers to execute arbitrary code through the "Image API" endpoint. This issue arises from improper handling of file uploads,...

PT-2024-4336

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. Recommendations At t...

PT-2024-21694 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns Toshiba printers that have programs containing a hardcoded key used for file encryption. An attacker can exploit this by using the hardcoded key to decrypt...

PT-2024-23800 · Asus · Asus Download Master

Name of the Vulnerable Software and Affected Versions: ASUS Download Master affected versions not specified Description: The issue arises from a parameter in a certain page of ASUS Download Master that is not properly filtered for user input. This allows a remote attacker with administrative...

PT-2024-27919 · Motorola Solutions +1 · Vigilant Fixed Lpr Coms Box +1

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: The issue allows an unauthorized user to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product. This is possible because the data is...

PT-2024-26967 · Verint · Verint

Name of the Vulnerable Software and Affected Versions: Verint affected versions not specified Description: The issue concerns an unrestricted upload of a file with a dangerous type, classified as CWE-434. This could potentially allow an attacker to upload malicious files, leading to various...

PT-2024-5655

Name of the Vulnerable Software and Affected Versions PAN-OS affected versions not specified Description The issue is related to improper input validation in the PAN-OS software, which allows an attacker to manipulate the physical file system and elevate privileges. This can be exploited by an...

PT-2024-37237 · Palo Alto Networks · Palo Alto Networks Prisma Cloud Compute

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Prisma Cloud Compute affected versions not specified Description: A cross-site scripting XSS issue allows a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the we...

PT-2024-4206 · Schneider Electric · Schneider Electric Sage

Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage affected versions not specified Description: The issue is related to a buffer overflow in memory, which could allow a remote attacker to bypass authentication by sending a specially crafted POST request and setting...