PT-2024-9649 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager AEM affected versions not specified Description: The issue is related to inadequate access control in the Adobe Experience Manager AEM system, which manages content and media data. Exploitation of this issue could all...

PT-2024-5699 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to disclose protected information. There is no information about the...

PT-2024-5742

Name of the Vulnerable Software and Affected Versions Azure Stack Hub affected versions not specified Description The issue is related to insufficient input validation in the integrated Azure Stack Hub hybrid cloud computing system. Exploitation of this issue may allow an attacker to elevate thei...

PT-2024-5653 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory in the Kernel Streaming WOW Thunk Service Driver of Windows operating systems. This can allow an attacker to elevate their privileges...

PT-2024-5625 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server, which can allow an attacker to...

PT-2024-6182 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System ReFS. It is caused by a buffer overflow in memory, allowing a...

PT-2024-6658 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft PowerPoint, specifically in the parsing of PPTX files. This vulnerability can be exploited to allow an...

PT-2024-5649 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their privileges. The estimated...

PT-2024-5697 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information provided abo...

PT-2024-5741 · Microsoft · Officeplus

Name of the Vulnerable Software and Affected Versions: Microsoft OfficePlus affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It involves incorrect handling of symbolic links before accessing a file, which could allow an attacker to...

PT-2024-6529 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for iOS affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. There is ...

PT-2024-5696 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to a use-after-free vulnerability in the WinSock driver of Windows operating systems. This could allow an attacker to elevate thei...

PT-2024-8113 · Ocean Data Systems · Ocean Data Systems Dream Report

Name of the Vulnerable Software and Affected Versions: Ocean Data Systems Dream Report affected versions not specified Description: The issue is related to an incorrect permission vulnerability. This could allow a local unprivileged attacker to escalate their privileges and potentially cause a...

PT-2024-38517

Name of the Vulnerable Software and Affected Versions Transsion Carlcare App affected versions not specified Description A logical vulnerability in the Transsion Carlcare mobile application may lead to user information leakage risks. Recommendations At the moment, there is no information about a...

CVE-2024-32765 QTS, QuTS hero

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...

CVE-2024-32765 QTS, QuTS hero

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...

PT-2024-7369 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server. An attacker can exploit this by sending a specially crafted API request to obtain user informatio...

PT-2024-29988 · Dorsett Controls · Dorsett Controls Infoscan

Name of the Vulnerable Software and Affected Versions: Dorsett Controls InfoScan affected versions not specified Description: The issue concerns a leak of possible sensitive information through the response headers and the rendered JavaScript prior to user login. Recommendations: At the moment,...

PT-2024-29698 · Contacts · Contacts

Name of the Vulnerable Software and Affected Versions: Contacts module affected versions not specified Description: The issue is related to an access permission verification vulnerability in the Contacts module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-37931 · Journyx · Journyx

Name of the Vulnerable Software and Affected Versions: Journyx affected versions not specified Description: The issue arises from the generation of password reset tokens using an insecure source of randomness. This allows attackers who are aware of the username of the Journyx installation user to...