PT-2024-14372 · D Link · D-Link Covr 1100 +2

Name of the Vulnerable Software and Affected Versions: D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 Description: The issue truncates Wireless Access Point Passwords WPA-PSK, allowing an attacker to gain unauthorized network access via weak...

PT-2024-23514 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function. Recommendations: For Tenda FH1203 version 2.0.1.6, as a temporary workaround, consider restricti...

PT-2024-21941 · Sourcecodester · Sourcecodester Complete E-Commerce Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Complete E-Commerce Site version 1.0 Description: A critical vulnerability has been found in the SourceCodester Complete E-Commerce Site, affecting an unknown function of the file /admin/users photo.php. The manipulation of the...

CVE-2023-41038 Server crash when using specific form of SET BIND statement

Firebird is a relational database. Versions 4.0.0 through 4.0.3 and version 5.0 beta1 are vulnerable to a server crash when a user uses a specific form of SET BIND statement. Any non-privileged user with minimum access to a server may type a statement with a long CHAR length, which causes the...

PT-2024-21975 · Dotclear · Dotclear

Name of the Vulnerable Software and Affected Versions: Dotclear version 2.29 Description: A Reflected Cross-Site Scripting XSS issue has been identified in the Search functionality of the Admin Panel. Recommendations: For Dotclear version 2.29, consider disabling the Search functionality within t...

SUSE CVE-2024-24758

Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear Proxy-Authentication headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known...

PT-2024-3883 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP versions KERNEL 7.53 through KERNEL 7.94 SAP NetWeaver Application Server ABAP version KRNL64UC 7.53 Description: The issue is related to insufficient protection of internal data in the SAP NetWeaver...

PT-2024-20330 · Unknown · Mediaserver

Name of the Vulnerable Software and Affected Versions: media-server version 1.0.0 Description: A Use-After-Free UAF issue was discovered in the sip uac stop timer function. This issue is related to the /uac/sip-uac-transaction.c file. Recommendations: For media-server version 1.0.0, consider...

PT-2024-19644 · Symphony +1 · Symphony +1

Name of the Vulnerable Software and Affected Versions: symphony versions 3.6.3 and earlier Description: An issue in the software allows a remote attacker to execute arbitrary code via the log4j component. Recommendations: For versions 3.6.3 and earlier, consider disabling the log4j component unti...

PT-2024-20362 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version V17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the enable parameter in the setPortForwardRules function. This allows for potential exploitation. Recommendations: For TOTOLINK A3300R...

PT-2024-20147 · Cups Easy · Cups Easy

Name of the Vulnerable Software and Affected Versions: Cups Easy Purchase & Inventory version 1.0 Description: A Cross-Site Scripting XSS issue has been reported due to insufficient encoding of user-controlled inputs. This can be exploited via the /cupseasylive/grnprint.php endpoint, specifically...

PT-2024-15807 · Nsasoft · Nsasoft Product Key Explorer

Name of the Vulnerable Software and Affected Versions: Nsasoft Product Key Explorer version 4.0.9 Description: A vulnerability has been found in the component Registration Handler of Nsasoft Product Key Explorer. The manipulation of the argument Name/Key leads to memory corruption. An attack has ...

PT-2024-15719 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Company Visitor Management System, affecting some unknown functionality of the file search-visitor.php. The manipulation leads t...

PT-2024-14044 · Qstar · Qstar Archive Solutions

Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions Release RELEASE 3-0 Build 7 Patch 0 Description: The issue is related to incorrect access control, allowing unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server...

PT-2024-14042 · Qstar · Qstar Archive Solutions

Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions version RELEASE 3-0 Build 7 Patch 0 Description: A DOM Based Reflected Cross Site Scripting XSS issue was found in the qnme-ajax component, specifically in the method=tree level endpoint. This allows for potential...

PT-2023-28112 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 774 Description: The issue affects Pandora FMS, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Malicious code could be executed in the File Manager sectio...

PT-2023-20977 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: openCRX version 5.2.0 Description: The issue is related to an HTML injection vulnerability in the Search Criteria-Activity Number within the Saved Search Activity. This vulnerability can be exploited via the Name, Description, or Activity...

PT-2023-32856 · Unknown · Phpgurukul Online Notes Sharing System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Notes Sharing System version 1.0 Description: A problematic vulnerability has been found in the Contact Information Handler component of the PHPGurukul Online Notes Sharing System. The issue is related to the manipulation of...

PT-2023-30005 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to commit bf814 Description: The issue is related to an out of bounds read via the dist-alphabet size variable in the read vlc prefix function. Recommendations: For versions prior to commit bf814, consider applying a pat...

PT-2023-30076 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formStats. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the formSta...