PT-2024-2175 · Zeek · Zeek Plugin

Name of the Vulnerable Software and Affected Versions: Zeek Plugin versions d78dda6 and prior Description: The issue is related to an out-of-bounds read during the analysis of a specific Ethercat packet, which could allow an attacker to crash the Zeek process and leak some information in memory...

PT-2024-1834 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Accessibility component, which could allow a remote attacker who has...

dav1d Input Validation Error Vulnerability

dav1d is an AV1 cross-platform decoder from the individual developers at Void². A security vulnerability exists in dav1d versions prior to 1.4.0, which stems from an integer overflow vulnerability in the AV1 decoder...

GLSA-202402-14 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-14 QtWebEngine: Multiple Vulnerabilities - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

Race condition

StorageGRID formerly StorageGRID Webscale versions prior to 11.8 are susceptible to a Denial of Service DoS vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot...

NetApp StorageGRID and Web Security Vulnerabilities

NetApp StorageGRID is a suite of object storage solutions from Network Appliance NetApp. A security vulnerability exists in NetApp StorageGRID versions prior to 11.8. An attacker exploited the vulnerability to cause a denial of service on the system, which resulted in out of memory...

PT-2024-21047 · Alf.Io · Alf.Io

Name of the Vulnerable Software and Affected Versions: Alf.io versions prior to 2.0-M4-2402 Description: The issue allows an administrator on the Alf.io application to upload HTML files that trigger JavaScript payloads. This could enable an attacker who gains administrative access to persist acce...

PT-2024-19022 · Osticky2 +2 · Osticky2 +2

Name of the Vulnerable Software and Affected Versions: osTicky2 versions prior to 2.2.8 Description: An Open Redirect issue was discovered, allowing attackers to manipulate the return parameter in the URL to redirect to a malicious base64 encoded URL. This affects osTicky, a Joomla 3.x extension...

PT-2024-14199

Name of the Vulnerable Software and Affected Versions SoliPay Mobile App versions prior to 5.0.8 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For...

PT-2024-1781 · Intel · Openbmc

Name of the Vulnerable Software and Affected Versions: Intel Server Product OpenBMC versions prior to egs-1.09 Description: The issue is related to improper authentication in the OpenBMC firmware, which may allow an authenticated user to escalate their privileges via local access. This is due to...

PT-2024-1789 · Intel · Intel(R) Pcm

Name of the Vulnerable Software and Affected Versions: IntelR PCM software versions prior to 202307 Description: The issue is related to a buffer underflow in some IntelR PCM software, which may allow an unauthenticated user to potentially enable denial of service via network access. This could b...

Intel Ethernet Products Security Vulnerability

Intel Ethernet Products is a networking product from Intel Corporation. A security vulnerability exists in Intel Ethernet Products versions prior to 28.2, which stems from an issue with incorrect access control elements that could lead to privilege escalation via local access by an authenticated...

Intel QAT Drivers Security Vulnerability

Intel QAT Drivers is a driver from Intel Corporation USA. A security vulnerability exists in Intel QAT Drivers versions prior to QAT1.7-W-1.11.0, which stems from an out-of-bounds read issue that could cause an authenticated user to enable denial of service via local access...

PT-2024-14955 · Unknown · University Information System

Name of the Vulnerable Software and Affected Versions: University Information System versions prior to 12.12.2023 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2024-12809 · Intel · Intel Ethernet Tools/Driver Install

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet tools and driver install software versions prior to 28.2 Description: The issue is related to an improper access control element in some IntelR Ethernet tools and driver install software. This may allow an authenticated user t...

Intel MPI Library Software Security Vulnerability

Intel MPI Library is a library from Intel Corporation USA. A security vulnerability exists in Intel MPI Library Software versions prior to 2021.11, which stems from an uncontrolled search path issue that could lead to privilege escalation via local access by an authenticated user...

PT-2024-1749

Name of the Vulnerable Software and Affected Versions ESET versions prior to the fixed version Description The issue is related to a local privilege escalation vulnerability that potentially allows an attacker to misuse ESET’s file operations to delete files without having proper permission. This...

CVE-2024-1372 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise...

CVE-2023-6072

A cross-site scripting vulnerability in Trellix Central Management CM prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard...

PT-2024-2798 · Dell · Dell Powerprotect Data Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.15 and prior Description: The issue is an OS command injection vulnerability that could allow a remote high privileged attacker to execute arbitrary OS commands on the application's underlying OS wit...