PT-2024-21599 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, where the frequency table arrays are not properly terminated with an empty element. This can lead to possible out-of-bound access when the tab...

PT-2024-40647 · Wasmedge · Wasmedge

Name of the Vulnerable Software and Affected Versions: WasmEdge affected versions not specified Description: A crash issue was identified in WasmEdge, related to a container-overflow read. The issue occurs in the compile function of the WasmEdge::LLVM::Compiler module, which is called by...

PT-2024-20498 · Unknown · Page Restrict

Name of the Vulnerable Software and Affected Versions: Page Restrict versions 2.5.5 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

PT-2024-2973 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the dmaengine component, specifically the idxd module, in the Linux kernel. It allows changes to be made when the device is enabled but the wq work queue is...

PT-2024-1984 · Unknown · Gguf Library

Name of the Vulnerable Software and Affected Versions: GGUF library affected versions not specified Description: A heap-based buffer overflow vulnerability exists in the GGUF library's GGUF TYPE ARRAY/GGUF TYPE STRING parsing functionality of llama.cpp. This issue is related to integer overflow...

PT-2024-20436 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2024-12868 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A potential issue is noted, suggesting the tracking of evicted transactions as a mitigation measure. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-2167 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: The issue is related to a flaw in the re-authentication mechanism within Keycloak, specifically in the org.keycloak.authentication module. This flaw allows an attacker to hijack an active...

PT-2024-21294 · Unknown · Electroncord

Name of the Vulnerable Software and Affected Versions: ElectronCord affected versions not specified Description: ElectronCord is a bot management tool for Discord. A commit exposes an account access token in the config.json file. Malicious actors could potentially exploit this to gain unauthorize...

PT-2024-3917 · Ge Healthcare · Ge Healthcare Echopac

Name of the Vulnerable Software and Affected Versions: GE HealthCare EchoPAC products affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in GE HealthCare EchoPAC products. It is associated with insufficient access control, which could allo...

PT-2024-18913 · Unknown · Caddy-Security

Name of the Vulnerable Software and Affected Versions: github.com/greenpau/caddy-security versions all Description: The issue is related to Server-side Request Forgery SSRF via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or...

PT-2024-19057

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Recommendations At the...

PT-2024-20218 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to the fixed version, exact versions not specified Description: When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to...

PT-2024-1824

Name of the Vulnerable Software and Affected Versions Microsoft Defender for Endpoint affected versions not specified Description The issue is related to insufficient access control in Microsoft Defender for Endpoint, which can be exploited to elevate privileges. There is no information provided...

PT-2024-2683 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to a business logic error in Zoom's meeting chat component, which is associated with incorrect handling of logical operations. This error may allow a remote attacker to...

PT-2024-1885 · Microsoft · Azure File Sync

Name of the Vulnerable Software and Affected Versions: Microsoft Azure File Sync affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft Azure File Sync service, which can be exploited to bypass existing security limitations and eleva...

PT-2024-19633 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A vulnerability notification is available, but details about the issue are not provided. No information is available about potentially affected...

PT-2024-14818 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A vulnerability notification is available, but details about the issue are not provided due to the rejection of the CVE as non-security related. Recommendations: At the momen...

PT-2024-15950 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content. Recommendations: At the moment, there is no information...

PT-2024-12385 · Unknown · Multi-Mode Call Processor

Name of the Vulnerable Software and Affected Versions: Multi-Mode Call Processor affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Multi-Mode Call Processor when it processes the UE policy container. Recommendations: At the moment, there...