PT-2024-8151 · Microsoft · Windows Usb Video Class System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Video Class System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system...

PT-2024-39785 · Trimble · Trimble Sketchup Viewer

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this issue, where...

PT-2024-8560 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Native Client component of Microsoft SQL Server. This can allow a remote attacker to execut...

PT-2024-35195 · Unknown · Christian Science Bible Lesson Subjects

Name of the Vulnerable Software and Affected Versions: Christian Science Bible Lesson Subjects versions n/a through 2.0 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a DOM-Based XSS vulnerabilit...

netfilter: xtables: avoid NFPROTO_UNSPEC where needed

...

UBUNTU-CVE-2024-50142

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a "xfrm: Validate address prefix lengths in the xfrm selector." syzbot created an SA with...

VulnCheck KEV: CVE-2014-2120

Cisco Adaptive Security Appliance ASA contains a cross-site scripting XSS vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

PT-2024-34682 · Unknown · Hdc Module

Name of the Vulnerable Software and Affected Versions: HDC module affected versions not specified Description: The issue concerns the lack of verification of input parameters in the HDC module. Successful exploitation may impact availability. Recommendations: At the moment, there is no informatio...

VulnCheck KEV: CVE-2024-43093

Android Framework contains an unspecified vulnerability that allows for privilege escalation...

PT-2024-19861 · Unknown · Wifi Display Api

Name of the Vulnerable Software and Affected Versions: WiFi Display API affected versions not specified Description: The issue is related to memory corruption that occurs when WiFi display APIs are invoked with large random inputs. Recommendations: At the moment, there is no information about a...

PT-2024-9534 · Poly · Poly Video Conferencing Devices

Name of the Vulnerable Software and Affected Versions: Poly video conferencing devices affected versions not specified Description: A potential issue was discovered in certain Poly video conferencing devices, related to the firmware not properly sanitizing user input. This can be exploited by a...

PT-2024-34618 · Altai · Altai Ix500 Indoor 22 802.11Ac Wave 2 Ap

Name of the Vulnerable Software and Affected Versions: Altai X500 Indoor 22 802.11ac Wave 2 AP affected versions not specified Description: The issue concerns a weak password leakage in the web management of the Altai X500 Indoor 22 802.11ac Wave 2 AP. This weakness may lead to unauthorized acces...

PT-2024-16431 · Changing Information Technology · Idexpert

Name of the Vulnerable Software and Affected Versions: IDExpert from CHANGING Information Technology affected versions not specified Description: The issue is related to improper validation of a parameter for a specific functionality in IDExpert, allowing unauthenticated remote attackers to injec...

PT-2024-7817 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: FileManager affected versions not specified Description: The vulnerability in the FileManager web interface is related to deficiencies in the deserialization mechanism. Exploitation of this issue may allow a remote attacker to execute arbitra...

PT-2024-39437 · Unknown · Privileged Identity

Name of the Vulnerable Software and Affected Versions: Privileged Identity affected versions not specified Description: A medium severity issue has been identified within Privileged Identity, allowing an attacker to perform reflected cross-site scripting attacks. Recommendations: At the moment,...

PT-2024-36861

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue has been resolved in the Linux kernel, specifically in the iio: adc: ad7923 module. The AD7923 was updated to support devices with 8 channels, but the size of tx...

PT-2024-10226

Name of the Vulnerable Software and Affected Versions PackageKit affected versions not specified Description The issue is related to insufficient input validation in the PackageKit component of macOS operating systems. This can allow an attacker to execute arbitrary code. Recommendations At the...

PT-2024-32620 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to the improper processing of HTTP authentication requests by Sharp and Toshiba Tec MFPs, resulting in an authentication bypass. Recommendations: At...

Security Bulletin: IBM Security Guardium is affected by vulnerabilities in Oracle MySQL

Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-21137 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow a remote authenticated attacker to cause high...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-18077)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause MySQL Server to hang or crash frequently and repeatedly...