PT-2025-3178 · Aviatrix · Aviatrix Network Controller

Name of the Vulnerable Software and Affected Versions: Aviatrix Network Controller affected versions not specified Description: The issue concerns a command injection vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-5650 · Opencv · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the cv::PngDecoder module, specifically in the read from io, read chunk, and readHeader functions. Recommendations:...

PT-2024-10978 · Huawei · Huawei Wearables

Name of the Vulnerable Software and Affected Versions: Huawei wearables affected versions not specified Description: The issue is related to a permission management vulnerability in some Huawei wearables. There is no information provided about the estimated number of potentially affected devices...

PT-2024-10777 · Unknown · Abe Service

Name of the Vulnerable Software and Affected Versions: ABE service affected versions not specified Description: The issue is related to flaws in the verification of input parameters. An attacker can input carefully constructed commands to make the ABE service execute some commands with root...

PT-2024-9428 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can potentially allow an attacker to gain higher privileges on the system...

PT-2024-19171

Name of the Vulnerable Software and Affected Versions obs-scm-bridge affected versions not specified Description The issue allows attackers to create specially crafted git repositories, potentially leading to information leakage or denial of service. Recommendations At the moment, there is no...

PT-2024-35195 · Unknown · Christian Science Bible Lesson Subjects

Name of the Vulnerable Software and Affected Versions: Christian Science Bible Lesson Subjects versions n/a through 2.0 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a DOM-Based XSS vulnerabilit...

PT-2024-6974 · Microsoft · Windows Secure Kernel Mode +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Kernel Mode affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system. Recommendations: At th...

PT-2024-38865 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: The issue concerns Prisma Access Browser. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendation...

PT-2024-6266 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized...

PT-2024-27904 · Microsoft · Azure Stack Hub

Name of the Vulnerable Software and Affected Versions: Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Stack Hub. There is no information provided about the estimated number of potentially affected devices...

PT-2024-27897 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide...

PT-2024-11673 · Apache · Apache Xmlsql Server

Name of the Vulnerable Software and Affected Versions: Apache XMLSQL Server affected versions not specified Description: The issue concerns a SQL injection problem. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no informati...

PT-2024-5649 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their privileges. The estimated...

PT-2024-40117 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 affected versions not specified Description: The issue concerns the exposure of the current TYPO3 version number to non-authenticated users through the Install Tool. Recommendations: At the moment, there is no information about a newer...

PT-2024-5502 · Umi Cms · Umi Cms

Name of the Vulnerable Software and Affected Versions: UMI CMS affected versions not specified Description: The issue is related to the lack of protection against SQL query structure exploitation in UMI CMS, a multi-site content management system. This could allow a remote attacker to execute...

PT-2024-5500 · Umi Cms · Umi Cms

Name of the Vulnerable Software and Affected Versions: UMI CMS affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in UMI CMS, a multi-site content management system. This could allow a remote attacker to execute...

PT-2024-12988 · Motorola · Motorola Phone Calls

Name of the Vulnerable Software and Affected Versions: Motorola Phone Calls affected versions not specified Description: An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...

PT-2024-23340 · Unknown · Accountmanager

Name of the Vulnerable Software and Affected Versions: AccountManager module affected versions not specified Description: The issue is related to a command injection vulnerability in the AccountManager module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-21014 · Unknown · Getdiae Uslistparameters

Name of the Vulnerable Software and Affected Versions: GetDIAE usListParameters affected versions not specified Description: A SQL injection issue exists in GetDIAE usListParameters. This allows for potential exploitation. No information is provided about the estimated number of affected devices ...