PT-2024-40565 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as chunk free object, sfclose, and pdfi close file. No...

PT-2024-30033 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System via the medium parameter at the "unitmarks.php" endpoint. This allows for potential exploitation. No...

PT-2024-30035 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It can be exploited via the medium parameter at the "attendance.php" endpoint. There is no information provided about...

PT-2024-30028 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System, specifically via the transport parameter at the "vehicle.php" endpoint. This allows for potential...

PT-2024-29876 · Servision · Servision

Name of the Vulnerable Software and Affected Versions: Servision affected versions not specified Description: The issue concerns improper authentication, which is a type of security flaw where authentication mechanisms are not properly implemented, potentially allowing unauthorized access. The...

PT-2025-2854 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in the Android operating system's Framework component. This can be exploited to cause a denial of service. Recommendations: At the...

PT-2024-6611 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this issue, where the target...

PT-2024-30031 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was found in the School Management System via the medium parameter at the "admininsert.php" endpoint. This allows for potential exploitation. No...

PT-2024-11941 · Cisco · Cisco Webex

Name of the Vulnerable Software and Affected Versions: Cisco WebEx affected versions not specified Description: A buffer overflow issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

PT-2024-30722 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the s390/fpu component of the Linux kernel, where exception handling for the lfpc instruction within the load fpu state function was removed during a recent cod...

PT-2024-30016 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System affected versions not specified Description: A Cross-Site Request Forgery CSRF issue in the admin modify room.php component of the Hotel Management System allows attackers to escalate privileges. Recommendations: At th...

PT-2024-11673 · Apache · Apache Xmlsql Server

Name of the Vulnerable Software and Affected Versions: Apache XMLSQL Server affected versions not specified Description: The issue concerns a SQL injection problem. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no informati...

PT-2024-11678 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache affected versions not specified Description: The issue concerns incorrect handling of headers. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

PT-2024-40891 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details about the crash include the involvement of the libssh2 default free function, session free, and libssh2 session free...

PT-2024-7252 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to insufficient access control in the СКУД Gate software. Exploitation of this issue may allow a remote attacker to gain access to the software's database...

PT-2024-17906 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: The issue is a type confusion vulnerability in the parsing of XE files, which can be exploited by remote attackers to execute arbitrary code on affected installations of...

PT-2024-41494 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: libpcap affected versions not specified Description: The software contains a use-of-uninitialized-value issue within the pcpp::NflogLayer::parseNextLayer and pcpp::Packet::setRawPacket functions, as reported by OSS-Fuzz. This issue occurs...

PT-2024-28993 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server affected versions not specified Description: The issue allows an authenticated user to consume file space resources due to unrestricted file uploads. Recommendations: At the moment, there is no information...

PT-2024-12596 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an information disclosure problem. No specific details about the issue are available due to the removal of references and descriptions. Recommendations: At the...

Unspecified Vulnerability in ChurchCRM (CNVD-2024-35648)

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0 that stems from a time-based SQL blind injection vulnerability in the CurrentFundraiser GET parameter of the FRCatalog.php page. No details of the vulnerability are provided at this tim...