PT-2024-23886 · Unknown · Bricksforge

Name of the Vulnerable Software and Affected Versions: Bricksforge versions n/a through 2.0.17 Description: The issue is related to a Missing Authorization vulnerability in Bricksforge. This vulnerability affects Bricksforge versions from n/a through 2.0.17. Recommendations: For versions n/a...

CVE-2024-36106

Affected product: Argo CD (GitOps for Kubernetes). Vulnerability: Authenticated users may enumerate clusters by name via error messages and, if cluster names are known, enumerate project-scoped cluster names as well. Root cause / status: Information disclosure through verbose error messages. Impa...

PT-2024-32193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm/amd/display component in the Linux kernel, where the UnboundedRequestEnabled value is a pointer dml bool t UnboundedRequestEnabled and is checked as an...

PT-2024-6415 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the target must...

PT-2024-25820 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: The issue is related to a use-after-free in HttpConnectionManager HCM with EnvoyQuicServerStream, which can cause Envoy to crash. An attacker can exploit this by sending a request without FIN...

PT-2024-13962 · Lexmark · Lexmark Cx331Adwe

Name of the Vulnerable Software and Affected Versions: Lexmark CX331adwe affected versions not specified Description: A method to override the firmware downgrade protection has been identified in some Lexmark products. This issue allows for a bypass of the downgrade protection feature that was...

PT-2024-25636 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue concerns a CSRF risk in the admin management of analytics models due to the lack of a necessary token. This could allow unauthorized actions on behalf of users. Recommendations: At...

PT-2024-40407 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security issue has been found where cookies created in the Install Tool are not properly secured to only be submitted via HTTP. This, combined with other issues like cross-site...

PT-2024-34097 · Citrix · Citrix Workspace App For Mac

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Mac affected versions not specified Description: The issue concerns a problem with Citrix Workspace app for Mac. There is no information about the estimated number of potentially affected devices worldwide or details...

PT-2024-40290 · Symbiote · Silverstripe-Multivaluefield

Name of the Vulnerable Software and Affected Versions: symbiote/silverstripe-multivaluefield affected versions not specified Description: A potential deserialisation issue has been identified, which could allow an attacker to exploit implementations of this module via object injection...

PT-2024-12232 · Wavlink · Wavlink Quantum D2G

Name of the Vulnerable Software and Affected Versions: Wavlink QUANTUM D2G routers affected versions not specified Description: An issue in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no...

PT-2024-40387 · Silverstripe · Silverstripe/Taxonomy Module

Name of the Vulnerable Software and Affected Versions: silverstripe/taxonomy module affected versions not specified Description: The issue is related to SQL injection in the silverstripe/taxonomy module. It specifically affects the TaxonomyDirectoryController controller, which is disabled by...

PT-2024-40477 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: Silverstripe Framework affected versions not specified Description: The issue allows arbitrary global functions to be executed if malicious user input is passed through as the second argument of ViewableData::renderWith. This occurs when the...

PT-2024-40066 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns lists of key/value pairs assigned to OptionsetField or CheckboxSetField that lack a default casting. This can lead to a potential XSS vulnerability when either th...

PT-2024-40294 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Software affected versions not specified Description: The issue concerns a user ID enumeration vulnerability in brute force error messages. It allows an attacker to infer or confirm user details...

PT-2024-40280 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: SilverStripe framework affected versions not specified Description: A low-level issue has been found in the framework, where the Quadratic Blowup Attack could potentially be exploited to affect the performance of a site. Recommendations: At t...

PT-2024-40781 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object and stream dct finalize. No...

PT-2024-40782 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object, s zlib free, and inflateEnd. No...

PT-2024-14694 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the wifi: ath12k driver in the Linux kernel. When the core rfkill config throws an error, it should free the allocated resources. However, it is not freeing the...

PT-2024-26753 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the io uring feature. The issue involves the io queue proc function modifying the req-flags variable. Recommendations:...