Synology DiskStation Manager Missing Authentication for Critical Function (CVE-2022-27623)

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager DSM before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

PT-2024-39022 · Planet Technology · Planet Technology Switch

Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns the use of obsolete algorithms for authentication and encryption protocols in the SNMPv3 service, potentially allowing attackers to obtain plainte...

Unspecified vulnerability in Linux kernel (CNVD-2024-40292)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...

VulnCheck KEV: CVE-2024-9537

ScienceLogic SL1 formerly EM7 is affected by an unspecified vulnerability involving an unspecified third-party component...

GLSA-202409-27 : tmux: Null Pointer Dereference

The remote host is affected by the vulnerability described in GLSA-202409-27 tmux: Null Pointer Dereference A null pointer dereference issue was discovered in function windowpanesetevent in window.c in which allows attackers to cause denial of service or other unspecified impacts. Tenable has...

PT-2024-32505 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Input method framework module affected versions not specified Description: The issue is related to an access permission verification vulnerability in the input method framework module. Successful exploitation of this vulnerability may affect...

PT-2024-39526 · Apache · Openssl

Name of the Vulnerable Software and Affected Versions: Apache OpenSSL affected versions not specified Description: A deserialization vulnerability was identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information...

PT-2024-39531 · Adobe · Flash

Name of the Vulnerable Software and Affected Versions: Adobe Flash affected versions not specified Description: A buffer overread issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

PT-2024-39469 · Adobe · Pdf

Name of the Vulnerable Software and Affected Versions: Adobe PDF affected versions not specified Description: A remote code execution issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information...

PT-2024-6815 · Unknown · Zangi Private Messenger

Name of the Vulnerable Software and Affected Versions: Zangi Private Messenger affected versions not specified Description: The issue is related to weaknesses in the session key generation mechanism of the application. This could allow a remote attacker to implement a "man-in-the-middle" attack...

PT-2024-32502 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an input validation vulnerability in the USB service module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the moment,...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

PT-2024-31801 · Planex Communications · Planex Communications Network Cameras

Name of the Vulnerable Software and Affected Versions: PLANEX COMMUNICATIONS network cameras affected versions not specified Description: A cross-site scripting issue exists in the web management page of the network cameras. If a logged-in user accesses a specific file, an arbitrary script may be...

PT-2024-6802 · Passwork · Passwork

Name of the Vulnerable Software and Affected Versions: Passwork affected versions not specified Description: The issue is related to the lack of protection measures for the web page structure in the password manager Passwork. This can be exploited by a remote attacker to perform a DOM Based XSS...

Hunspell: Multiple Vulnerabilities

Background Hunspell is the spell checker of LibreOffice, OpenOffice.org, Mozilla Firefox & Thunderbird, Google Chrome. Description Malicious input to the hunspell spell checker could result in an application crash or other unspecified behavior. Impact Malicious input to the hunspell spell checker...

PT-2024-9562 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the management system. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

PT-2024-29540 · Unknown · Progauge Maglink Lx Console

Name of the Vulnerable Software and Affected Versions: ProGauge MAGLINK LX CONSOLE affected versions not specified Description: The issue is related to insufficient filtering on input fields used to render pages, which may allow cross-site scripting. Recommendations: At the moment, there is no...

PT-2024-40583 · Graphql · Graphql

Name of the Vulnerable Software and Affected Versions: graphql affected versions not specified Description: The issue is related to a security exception in the graphql schema. Specifically, the problem occurs in the simplePrint function of GraphQLTypeUtil. This function is called multiple times,...

Apache Struts 2.0.0 < 2.3.18 RCE (S2-008)

The version of Apache Struts installed on the remote host is prior to 2.3.18. It is, therefore, affected by a vulnerability as referenced in the S2-008 advisory. - The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute...