PT-2024-20775

Name of the Vulnerable Software and Affected Versions apache-airflow-providers-mongo versions prior to 4.0.0 Description The issue arises when SSL is enabled for the Mongo Hook, and the default settings include allow insecure, which causes certificates not to be validated. This behavior is...

PT-2024-17471 · WordPress · Kali Forms

Name of the Vulnerable Software and Affected Versions: Kali Forms plugin for WordPress versions prior to 2.3.42 Description: The Kali Forms plugin for WordPress is affected by an issue that allows unauthorized access and modification of data via API due to an inconsistent capability check on...

PT-2024-20903 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 versions 1.4.0 Description: The issue allows a remote attacker to cause a denial of service via the mmsServer handleGetNameListRequest function to the mms getnamelist service component. Recommendations: For version 1.4.0, consider...

PT-2024-13932 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: A flaw has been discovered that allows for an unauthenticated Denial of Service DoS attack on the camera. By running a crafted URL, an attacker can prevent access to the web management page ...

PT-2024-19049 · Zoho · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Exchange Reporter Plus versions 5714 and below Description: The issue is related to an Authenticated SQL injection in the report exporting feature. Recommendations: For Zoho ManageEngine Exchange Reporter Plus versions 5714...

PT-2024-20868 · Unknown · Bludit Cms

Name of the Vulnerable Software and Affected Versions: Bludit CMS version 3.15 Description: A Cross Site Scripting XSS issue allows remote attackers to execute arbitrary code and obtain sensitive information via the "edit-content.php" endpoint. The estimated number of potentially affected devices...

PT-2024-19137 · Netapp · Storagegrid

Name of the Vulnerable Software and Affected Versions: StorageGRID formerly StorageGRID Webscale versions prior to 11.8 Description: The issue is a Denial of Service DoS vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot...

PT-2024-12783 · Dell · Dell Esi

Name of the Vulnerable Software and Affected Versions: DELL ESI Enterprise Storage Integrator for SAP LAMA version 10.0 Description: The issue concerns an information disclosure vulnerability in the EHAC component of DELL ESI Enterprise Storage Integrator for SAP LAMA. A remote unauthenticated...

PT-2024-20828

Name of the Vulnerable Software and Affected Versions Task Manager App version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter in the "/TaskManager/Projects.php" API endpoint...

PT-2024-2736 · Intel · Intel Killer Wi-Fi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software versions prior to 22.240 Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via adjacent...

PT-2024-2739 · Intel · Intel Proset/Wireless +1

Name of the Vulnerable Software and Affected Versions: Intel PROSet/Wireless and Intel Killer Wi-Fi software versions prior to 22.240 Description: The issue is related to improper input validation in some Intel PROSet/Wireless and Intel Killer Wi-Fi software, which may allow an unauthenticated us...

PT-2024-2733 · Intel · Intel Killer Wi-Fi +1

Name of the Vulnerable Software and Affected Versions: Intel PROSet/Wireless and Intel Killer Wi-Fi software versions prior to 22.240 Description: The issue is related to insufficient adherence to expected conventions in some Intel PROSet/Wireless and Intel Killer Wi-Fi software, which may allow ...

PT-2024-2883 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to improper input validation in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an unauthenticated user to potentially enab...

PT-2024-2660 · Siemens · Siplus Net Cp 343-1 Lean +3

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 343-1 versions All SIMATIC CP 343-1 Lean versions All SIPLUS NET CP 343-1 versions All SIPLUS NET CP 343-1 Lean versions All Description: A vulnerability has been identified in the affected products, which incorrectly validate TCP...

PT-2024-3883 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP versions KERNEL 7.53 through KERNEL 7.94 SAP NetWeaver Application Server ABAP version KRNL64UC 7.53 Description: The issue is related to insufficient protection of internal data in the SAP NetWeaver...

PT-2024-3899 · Sap · Sap Master Data Governance For Material

Name of the Vulnerable Software and Affected Versions: SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804 Description: The issue is related to the absence of a necessary authorization check for an authenticated user, resulting in escalation of...

PT-2024-3872 · Sap · Sap Companion

Name of the Vulnerable Software and Affected Versions: SAP Companion versions prior to 3.1.38 Description: The issue is related to a URL with a parameter that could be vulnerable to an XSS attack. An attacker could send a malicious link to a user, potentially allowing the attacker to retrieve...

PT-2024-3898 · Sap · Sap Crm Webclient Ui

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102 through S4FND 106 SAP CRM WebClient UI versions WEBCUIF 701 through WEBCUIF 801 Description: The SAP CRM WebClient UI does not sufficiently encode user-controlled inputs, resulting in a Cross-Site...

PT-2024-2826 · Mitsubishi · Melsec Iq-R Series Safety Cpu +1

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions Description: The issue is related to an Incorrect Privilege Assignment vulnerability that allows a remote...

PT-2024-13039 · Mystenlabs · Sui Blockchain

Name of the Vulnerable Software and Affected Versions: mystenlabs Sui Blockchain versions prior to 1.6.3 Description: An issue in mystenlabs Sui Blockchain allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted compressed script to the Sui node component...