PT-2024-13090 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption in Automotive Multimedia due to improper access control in HAB. Recommendations: At the moment, there is no information about a newer...

PT-2024-12384 · Unknown · Multi-Mode Call Processor

Name of the Vulnerable Software and Affected Versions: Multi-Mode Call Processor affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Multi-Mode Call Processor. This occurs due to a UE failure caused by heap leakage. Recommendations: At the...

AZL-34075 CVE-2024-21626 affecting package kubevirt for versions less than 0.59.0-14

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process from runc exec to have a working directory in the host filesystem...

CVE-2024-23653 BuildKit interactive containers API does not validate entitlements check

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

PT-2024-1716 · Unknown +7 · 389-Ds-Base +7

Name of the Vulnerable Software and Affected Versions: 389-ds-base affected versions not specified Description: The issue is related to a heap overflow flaw in the 389-ds-base component, specifically in the log entry attr function. This flaw can lead to a denial of service when a value larger tha...

PT-2024-13324 · Tex Live +2 · Tex Live +2

Name of the Vulnerable Software and Affected Versions: TeX Live version 944e257 Description: The issue in TeX Live allows a NULL pointer dereference in the tounicode.c file, located in texk/web2c/pdftexdir. However, it is noted that this issue is disputed and might be categorized as a usability...

PT-2024-13312 · Gnome · Gnome Gtk

Name of the Vulnerable Software and Affected Versions: Gnome GTK affected versions not specified Description: The issue is related to a null pointer dereference in Gnome GTK, specifically via the parse settings function at xsettings-client.c. Recommendations: At the moment, there is no informatio...

PT-2024-13300 · Xedit · Xedit

Name of the Vulnerable Software and Affected Versions: Xedit affected versions not specified Description: A null pointer dereference issue has been identified in Xedit. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-40942 · Unknown · Conrod Core

Name of the Vulnerable Software and Affected Versions: conrod core affected versions not specified Description: The issue concerns the conrod core crate, which is no longer maintained. As a result, users are advised to consider alternative solutions. The author recommends egui as a potential...

PT-2024-40759 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash state with functions such as dwg free common entity data, dwg free...

PT-2024-40904 · Crates.Io · Filesystem

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The software in question has not seen a release in over 5 years, with the last commit being over 4 years ago. This raises concerns about maintenance, as the maintainers have not responde...

PT-2024-2763 · Shim +6 · Shim +6

Name of the Vulnerable Software and Affected Versions: Shim affected versions not specified Description: The issue is related to an out-of-bounds read flaw in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE...

PT-2024-40704 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions mrb memsearch, str convert range, and...

PT-2024-13405 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A previously reported issue was withdrawn by its CNA after further investigation showed it was not a security issue. Recommendations: At the moment, there is no information...

PT-2024-4872 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the CreateFile method in SolarWinds Access Rights Manager, which is susceptible to a directory traversal vulnerability. This vulnerability c...

PT-2024-11606 · WordPress +1 · Form Vibes

Name of the Vulnerable Software and Affected Versions: Plugin affected versions not specified Description: The issue arises from the plugin's failure to filter the delete entries parameter from user requests, leading to an SQL Injection vulnerability. There is no information provided about the...

PT-2024-14402 · Unknown · Nearby Module

Name of the Vulnerable Software and Affected Versions: nearby module affected versions not specified Description: The nearby module has a privilege escalation issue. Successful exploitation of this issue may affect availability. Recommendations: At the moment, there is no information about a newe...

PT-2024-18990 · Unknown · Chromium Embedded Framework

Name of the Vulnerable Software and Affected Versions: Chromium Embedded Framework CEF affected versions not specified Description: The issue arises from the CefVideoConsumerOSR::OnFrameCaptured function not properly checking the pixel format, leading to an out-of-bounds read outside of the...

PT-2024-13718 · Hongdian · H8951-4G-Esp +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue concerns the visibility of the tokenKey value used in user authorization within the HTML source of the login page. This could potentially expose sensitive information...

PT-2024-5109 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to an Arbitrary File Deletion and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability is associate...