PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...

PT-2024-6974 · Microsoft · Windows Secure Kernel Mode +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Kernel Mode affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system. Recommendations: At th...

PT-2024-6839 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to pointer dereference errors in the Windows operating system kernel. It allows an attacker to cause a denial-of-service. Recommendations: At the moment, there i...

PT-2024-19854 · Fastrpc · Fastrpc

Name of the Vulnerable Software and Affected Versions: Fastrpc affected versions not specified Description: The issue is related to memory corruption that occurs when two threads attempt to free the same map in a concurrent scenario while unmapping the fastrpc map. Recommendations: At the moment,...

PT-2024-31508 · Zkteco · Zkteco

Name of the Vulnerable Software and Affected Versions: ZKteco affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor, labeled as CWE 200. This flaw allows sensitive information to be exposed. Recommendations: At the moment,...

PT-2024-31509 · Elfsight · Elsight

Name of the Vulnerable Software and Affected Versions: Elsight affected versions not specified Description: The issue is related to improper neutralization of special elements used in an OS command, also known as OS Command Injection. This is classified as CWE-78. Recommendations: At the moment,...

PT-2024-18585 · Power · Power

Name of the Vulnerable Software and Affected Versions: power affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in power. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2024-18590 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible out of bounds read in the wlan driver due to improper input validation. This could lead to remote information disclosure with System execution...

PT-2024-31503 · Diebold Nixdorf · Diebold Nixdorf

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf affected versions not specified Description: The issue concerns an Uncontrolled Search Path Element, which is a type of security weakness. This weakness can potentially be exploited to execute malicious code or escalate...

PT-2024-32711 · Unknown · Shilpi Client Dashboard

Name of the Vulnerable Software and Affected Versions: Shilpi Client Dashboard affected versions not specified Description: The issue is related to an inadequate authentication mechanism in the login module of the Shilpi Client Dashboard. This allows access to any user's account with just their...

PT-2024-37630 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue occurs in the utf8 trunc function found in zephyr/lib/utils/utf8.c, where last byte p might point to the byte just before the string pointer if the string is empty. This is a buffe...

PT-2024-15353 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Windows and Linux affected versions not specified Description: The NVIDIA CUDA toolkit contains a security issue in the nvdisasm command line tool. An attacker may cause an improper validation in input issue by trickin...

Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect IBM Cloud Pak System

Summary There are multiple Unspecified and Denial of Service Java SE Vulnerabilities that affect IBM Java SDK shipped with IBM Cloud Pak Sytem. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow a remote attack...

CVE-2024-30132

HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors...

U.S. Dept Of Defense: Cross-Site Scripting (XSS) Vulnerability via POST Method + Akamai Firewall Bypass

A Cross-Site Scripting XSS vulnerability was discovered in the POST method on the target website. The vulnerability allowed the injection of malicious scripts that could be executed. A payload was provided to bypass the Akamai firewall. The vulnerability was reported and the affected products and...

CVE-2024-44744

An issue in Malwarebytes Premium Security v5.0.0.883 allows attackers to execute arbitrary code via placing crafted binaries into unspecified directories. NOTE: Malwarebytes argues that this issue requires admin privileges and that the contents cannot be altered by non-admin users...

Malwarebytes Premium Security 安全漏洞

Malwarebytes Premium Security is a network security antivirus from Malwarebytes. A security vulnerability exists in Malwarebytes Premium Security version v5.0.0.883. An attacker can exploit the vulnerability to execute arbitrary code by placing specially crafted binaries into an unspecified...

PT-2024-32668 · Microsoft · Nuget Gallery

Name of the Vulnerable Software and Affected Versions: NuGet Gallery affected versions not specified Description: The NuGet Gallery has a security issue in its handling of HTML element attributes. This allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...

Synology DiskStation Manager Use of Insufficiently Random Values (CVE-2023-2729)

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager DSM before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

Synology DiskStation Manager Missing Authentication for Critical Function (CVE-2022-27623)

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager DSM before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors. This plugin only works with Tenable.ot. Please visit...