PT-2024-40332 · Jadx · Jadx

Name of the Vulnerable Software and Affected Versions: jadx affected versions not specified Description: The issue arises when jadx parses a resource file, specifically with an escape problem related to style files. This can lead to overwriting other files in the directory when saving the...

CVE-2023-49275 Wazuh vulnerable to NULL Pointer Dereference in wazuh-analysisd

Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing of the analysis engine, allowing malicious clients to DoS the analysis engine. The bug occurs when analysisd receives a syscollector message with th...

PT-2024-40700 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr and related Java functions. T...

PT-2024-7375 · Unknown · Форсайт. Аналитическая Платформа

Name of the Vulnerable Software and Affected Versions: Форсайт. Аналитическая платформа affected versions not specified Description: The issue is related to the lack of protection for the web page structure, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack...

PT-2024-3939 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to an incorrect reference count before accessing a file, which can be exploited to elevate privileges using a specially crafted link. Recommendations: At th...

PT-2024-40986 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt and related containers affected versions not specified Description: The issue concerns the OrdinalPodInterfaceName mechanism, which has been improved. There is no information provided about the estimated number of potentially affecte...

PT-2024-19942 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to a sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values. Recommendations: At the moment, there is...

PT-2024-4760 · Энтек · Энтек

Name of the Vulnerable Software and Affected Versions: ЭНТЕК affected versions not specified Description: The issue is related to insufficient restriction of authentication attempts in the SCADA system. This can be exploited by a remote attacker to perform a brute force attack. Recommendations: A...

PT-2024-19939 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue arises from the failure of HCL DevOps Deploy / HCL Launch to invalidate a user's session after they log out. This could potentially allow an authenticated...

PT-2024-12304 · Amc2-2Wcf +1 · Amc2-2Wcf +1

Name of the Vulnerable Software and Affected Versions: AMC2-4WCF and AMC2-2WCF affected versions not specified Description: The issue is related to a firmware bug that may cause misinterpretation of data, allowing an adversary to grant access to the last authorized user. Recommendations: At the...

PT-2024-3581 · Lenovo · Thinkagile +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem, ThinkAgile, NeXtScale, and Lenovo CP-CB-10 affected versions not specified SMM/SMM2 and FPC affected versions not specified Description: A command injection issue was identified in the System Management Module SMM/SMM2 and...

PT-2024-2890 · Microsoft · Azure Compute Gallery

Name of the Vulnerable Software and Affected Versions: Azure Compute Gallery affected versions not specified Description: The issue is related to inadequate access control in the Azure Compute Gallery, which is a tool for creating and managing virtual machine VM and container images. This can be...

PT-2024-2786 · Unknown +6 · Libarchive +6

Name of the Vulnerable Software and Affected Versions: libarchive affected versions not specified Description: The vulnerability is related to a heap-based buffer overflow in the libarchive library, which can allow remote attackers to execute arbitrary code. This issue is associated with a buffer...

PT-2024-40689 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash occurred in the ndpi detection process packet function, which is located in the fuzz process...

PT-2024-23344 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns insufficient permission verification in the app management module. Successful exploitation of this issue will affect availability...

PT-2024-21485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the interconnect component in the Linux kernel, specifically the sc8180x driver. The CO0 BCM needs to be kept alive at all times to prevent hardware like the UFS...

PT-2024-40685 · Git +1 · Openh264

Name of the Vulnerable Software and Affected Versions: Open-source software affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the WelsDec::CWelsDecoder class, specifically in the ReorderPicturesInDisplay,...

PT-2024-18878 · Qualcomm · Snapdragon +26

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs when decoding a message of a size that exceeds the available system memory...

PT-2024-23790 · Heartthis · Heartthis

Name of the Vulnerable Software and Affected Versions: HeartThis versions 0.1.0 and earlier Description: The issue is related to Contributor Cross Site Scripting XSS in the software. Recommendations: For HeartThis versions 0.1.0 and earlier, at the moment, there is no information about a newer...

PT-2024-40906 · Unknown · Catppuccin

Name of the Vulnerable Software and Affected Versions: Catppuccin affected versions not specified Description: The issue concerns a deprecated tool, with users recommended to use Catppuccin's new tool, whiskers, instead. Recommendations: At the moment, there is no information about a newer versio...