PT-2024-33125 · Oracle · Oracle Movi Logic

Name of the Vulnerable Software and Affected Versions: Oracle MOVI Logic affected versions not specified Description: The issue concerns a remote code execution vulnerability. No further details are provided about the vulnerability, including any potential impact or exploitation methods...

PT-2024-10607 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a Server-Side Request Forgery SSRF in Apache Struts. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2024-41624

The CVE-2024-41624 entry concerns Himalaya Xiaoya nano smart speaker ROM version 1.6.96 with an issue described as incorrect access control. Across connected sources, the affected component is the device firmware/ROM and the vulnerability is an access-control weakness that could allow a remote at...

PT-2024-10605 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a remote code execution problem. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendations: At...

PT-2024-37880 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

PT-2024-28613 · Iaware · Iaware

Name of the Vulnerable Software and Affected Versions: iAware module affected versions not specified Description: The issue is related to a serialisation/deserialisation mismatch in the iAware module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At th...

VulnCheck KEV: CVE-2014-2908

Cross-site scripting XSS vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2024-40824 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: FLAC affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the FLAC replaygain synthesis apply gain function, which is called from the write callback and...

PT-2024-5277 · Microsoft +3 · Edge +5

Name of the Vulnerable Software and Affected Versions: Chromium affected versions not specified Google Chrome affected versions not specified Microsoft Edge affected versions not specified Description: The issue is related to a buffer overflow in the ANGLE library, which can be exploited by a...

EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2024-2034)

According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified...

PT-2024-22707 · Hewlett Packard · Hp Application Enabling Software Driver +1

Name of the Vulnerable Software and Affected Versions: HP Application Enabling Software Driver affected versions not specified Description: The issue is related to potential vulnerabilities identified in the HP Display Control software component within the HP Application Enabling Software Driver,...

Unspecified Vulnerability in Google Chrome (CNVD-2024-35098)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from an improper implementation issue found in the PicturePicture module. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in Google Chrome (CNVD-2024-35096)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from an improper implementation issue found in the Skia module. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in Google Chrome (CNVD-2024-35100)

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability that stems from a post-release usage issue found in the DevTools module. No details of the vulnerability are provided at this time...

CGA-C5CF-23GJ-CCMF

Bulletin has no description...

PT-2024-25214 · Bluestack Systems · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks affected versions not specified Description: The issue concerns a privilege escalation through VM backdooring. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-5670 · Netcat · Netcat Netshop Cms

Name of the Vulnerable Software and Affected Versions: Netcat Netshop CMS affected versions not specified Description: The issue is related to a cross-site request forgery vulnerability in the netshop CMS module of Netcat. This could allow a remote attacker to execute arbitrary JavaScript code in...

CGA-4RXX-69W2-R84M

Bulletin has no description...

PT-2024-40107 · Risc Zero · Risc Zero Zkvm

Name of the Vulnerable Software and Affected Versions: RISC Zero zkVM affected versions not specified Description: The RISC Zero zkVM does not meet the requirements to assert the specific property of zero knowledge provably, according to new research by Ulrich Habock and Al Kindi. This issue...

PT-2024-37961

Name of the Vulnerable Software and Affected Versions CPython affected versions not specified Description The issue concerns the email module in CPython, which did not properly quote newlines for email headers when serializing an email message. This allows for header injection when an email is...