18990 matches found
PT-2024-37933 · Journyx · Journyx
Name of the Vulnerable Software and Affected Versions: Journyx affected versions not specified Description: The issue allows attackers to craft a malicious link that, when clicked, will execute arbitrary JavaScript in the context of the Journyx web application. Recommendations: At the moment, the...
Amazon Linux 2023 : libsndfile, libsndfile-devel, libsndfile-utils (ALAS2023-2024-701)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-701 advisory. Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other...
PT-2024-37563 · Opentext · Opentext Arcsight Intelligence
Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A vulnerability related to incorrect authorization has been identified. Recommendations: At the moment, there is no information about a newer version that contains a...
PT-2024-38398 · Trimble · Trimble Sketchup
Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...
PT-2024-25067 · Unknown · Hgsl Driver
Name of the Vulnerable Software and Affected Versions: HGSL driver affected versions not specified Description: The issue is related to memory corruption that occurs during memory allocation in the HGSL driver. Recommendations: At the moment, there is no information about a newer version that...
PT-2024-18902 · Unknown · Resource Manager
Name of the Vulnerable Software and Affected Versions: Resource Manager affected versions not specified Description: The issue is related to memory corruption that occurs when preparing a shared memory notification for a memparcel in Resource Manager. Recommendations: At the moment, there is no...
CVE-2024-28297
SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2024-6567 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: An authenticated command injection issue exists in the ArubaOS command line interface, allowing successful exploitation to result in the ability to inject shell commands on the underlying...
PT-2024-6565 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A Path Traversal vulnerability exists in the ArubaOS, related to incorrect restriction of directory path names with limited access. Successful exploitation of this vulnerability allows an...
CVE-2024-28297
AzureSoft MyHorus 4.3.5 contains an SQL injection vulnerability exploitable by authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected component is the application’s input handling (unspecified vectors) that leads to confidential data exposure risk (CVE-2024-28297)...
CVE-2024-28297
SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors...
Unspecified Vulnerability in Tencent WeChat (CNVD-2025-06512)
Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and text, among other things. An unspecified vulnerability exists in Tencent WeChat. An attacker can exploit the vulnerability to elevate...
DLink DIR Information Disclosure (PT-2011-30)
The version of DLink DIR installed on the remote host is affected by information disclosure Vulnerability as referenced in the PT-2011-30 advisory. The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vector...
PT-2024-10382 · Firebird · Firebird
Name of the Vulnerable Software and Affected Versions: Популяционный раковый регистр and Госпитальный раковый регистр affected versions not specified Description: The issue is related to the Firebird component of the software, which stores passwords along with decryption means. This could allow a...
PT-2024-29523 · Accupos · Accupos
Name of the Vulnerable Software and Affected Versions: AccuPOS affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-2024-41624
Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...
PT-2024-10730 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Scripting XSS problem. No specific details about affected devices, real-world incidents, or technical exploitation details are provided...
CVE-2024-41624
Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...
PT-2024-11629 · Dropbox · Dropbox
Name of the Vulnerable Software and Affected Versions: Dropbox affected versions not specified Description: The issue concerns a SQL injection vulnerability. No specific details about the vulnerability, affected devices, or real-world incidents are provided. Recommendations: At the moment, there ...