PT-2024-38760 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: The issue concerns Prisma Access Browser. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendation...

Microsoft Azure Stack 访问控制错误漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft Corporation USA. The product supports building and deploying hybrid applications. An access control error vulnerability exists in Microsoft Azure Stack. An attacker could exploit...

PT-2024-6254 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a component of the Windows operating system's authentication mechanism, specifically involving the use of an uninitialized resource. This can allow an attacker to...

Microsoft Outlook 授权问题漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Outlook. An attacker could exploit this vulnerability to obtain sensitive information. No information about this vulnerability is available at this time, so...

PT-2024-31220 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.1 Description: The issue is an arbitrary file read vulnerability. It affects the admin safe.php component. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2024-39039 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: A Cross-Site Scripting XSS vulnerability is present, where user-controlled input is not sufficiently encrypted. This could allow an attacker to retrieve the session details of a...

PT-2024-39030 · Unknown · Phpgurukul Job Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Job Portal version 1.0 Description: The issue is a file upload restriction bypass vulnerability, which could allow an authenticated user to execute a Remote Code Execution RCE via webshell. Recommendations: For PHPGurukul Job Porta...

PT-2024-39034 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: The issue is related to a SQL injection vulnerability. An attacker could send a specially designed query through the id parameter in the "/jobportal/admin/category/index.php"...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock issue in the xen:privcmd component that may result from the use of mutually exclusive locks. No...

PT-2024-38925 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability exists in the memory management module that deals with memory requests. If exploited, it can impact service confidentiality...

PT-2024-30245 · Mcms · Mcms

Name of the Vulnerable Software and Affected Versions: MCMS version 5.4.1 Description: The issue is related to a front-end file upload vulnerability in MCMS, which can lead to remote command execution. This allows an attacker to execute commands remotely. Recommendations: For MCMS version 5.4.1,...

PT-2024-38697 · 3Dswymer +1 · 3Dswymer +1

Name of the Vulnerable Software and Affected Versions: 3DSwymer version 3DEXPERIENCE R2024x Description: A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in a user's browser session...

PT-2024-31210 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: Seacms version 13 Description: The issue is related to Cross Site Scripting XSS via the admin-video.php endpoint. This allows for potential malicious script execution. No information is provided about the estimated number of potentially...

PT-2024-28596 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon Booking System versions n/a through 10.7 Description: The issue is related to an SQL Injection problem caused by improper handling of special elements in an SQL command. This allows for SQL Injection attacks, which can potentially lead ...

D-Link DIR-846W 安全漏洞

D-Link DIR-846W is a dual-band Gigabit wireless router with second-generation 11AC technology and MU-MIMO technology, supporting dual-band concurrent transmission rates up to 1200Mbps for 200M and above broadband users. A command execution vulnerability exists in the D-Link DIR-846W. The...

TOTOLINK AC1200 信任管理问题漏洞

TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 version 4.1.8cu.5207 suffers from a trust management issue vulnerability that originates from an unknown function in the Telnet service component with hard-coded credentials in the file...

PT-2024-38835 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Pharmacy Management System. This issue affects the file /index.php?action=editSalesman and is related to the...

CyberArk Identity Management 安全漏洞

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management suffers from a security vulnerability that stems from client-side execution of server-side security. No detailed vulnerability details are provided at this time...

PT-2024-7294 · Fireboltt · Fire-Boltt Artillery Smart Watch

Name of the Vulnerable Software and Affected Versions: Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 Description: The issue is related to insecure permissions in the Bluetooth Low Energy BLE component, which can be exploited to cause a Denial of Service DoS. This may allow an attacker to disconnec...

PT-2024-30204 · Unknown · Staff Appraisal System

Name of the Vulnerable Software and Affected Versions: Staff Appraisal System version 1.0 Description: A host header injection vulnerability in the Staff Appraisal System allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This enables...