18990 matches found
PT-2024-21283 · Unknown · Substation Server
Name of the Vulnerable Software and Affected Versions: Substation Server affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in Substation Server. No specific details about the nature of the vulnerabilities, affected devices, or real-worl...
Unspecified Vulnerability in Google Chrome (CNVD-2024-26084)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from type obfuscation in V8. No details of the vulnerability are provided at this time...
PT-2024-36006
Name of the Vulnerable Software and Affected Versions: Openfind Mail2000 affected versions not specified Description: The issue is related to improper filtering of parameters in specific CGI, allowing remote attackers with regular privileges to execute arbitrary system commands on the remote...
PT-2024-40479 · Osv · Osv
Name of the Vulnerable Software and Affected Versions: OSV affected versions not specified Description: The issue concerns a form that may populate a PasswordField with submitted data, reflecting it back to the user. This behavior is not considered best practice, as it may expose the user's own...
IRZ RUH2 Insufficient Verification of Data Authenticity (CVE-2016-2309)
iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
PT-2024-41051 · Xxd · Xxd
Name of the Vulnerable Software and Affected Versions: xxd affected versions not specified Description: The issue is related to a buffer overflow in xxd when colored output is used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2024-6405 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...
PT-2024-21888 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport busy delay in the netrom component. This issue affects the Linux kernel. Recommendations: At the moment, there is n...
PT-2024-24918 · Lenovo · Lenovo Printers
Name of the Vulnerable Software and Affected Versions: Lenovo printers affected versions not specified Description: A buffer overflow issue was identified in some Lenovo printers, allowing an unauthenticated user to trigger a device restart by sending a specially crafted web request...
PT-2024-40152 · Pypi · Pygmentize
Name of the Vulnerable Software and Affected Versions: pygmentize affected versions not specified Description: The issue is related to remote code execution due to unsafe sanitization of user input when passed to the highlight function. Recommendations: At the moment, there is no information abou...
PT-2024-40258 · Monolog · Monolog
Name of the Vulnerable Software and Affected Versions: Monolog library affected versions not specified Description: A header injection issue has been identified in the NativeMailerHandler of the Monolog library, potentially allowing an attacker to manipulate email headers when log messages are se...
PT-2024-4720 · Microsoft · Net Core
Name of the Vulnerable Software and Affected Versions: .NET Core versions affected versions not specified Description: The issue is related to an incorrect restriction of directory path names in the .NET Core software component "Сервис обновлений". This could allow a remote attacker to gain read...
PT-2024-22232 · Unknown · Powersystem Center
Name of the Vulnerable Software and Affected Versions: PowerSYSTEM Center affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in PowerSYSTEM Center. No specific details about the nature of the vulnerabilities, affected devices, or...
PT-2024-40413 · Packagist · Drupal Core
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: A visit to the install.php endpoint can cause cached data to become corrupted, potentially impairing a site until caches are rebuilt. Recommendation...
PT-2024-40266 · Drupal · Drupal
Name of the Vulnerable Software and Affected Versions: Drupal affected versions not specified Description: The issue is related to an access bypass in Drupal's content moderation system. Under certain conditions, it fails to properly check a user's access to use specific transitions...
PT-2024-3611 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system. No information is provided...
PT-2024-18178 · Ge Healthcare · Ge Healthcare Ultrasound Devices
Name of the Vulnerable Software and Affected Versions: GE HealthCare ultrasound devices affected versions not specified Description: The issue concerns OS command injection vulnerabilities. No further details are provided about the estimated number of potentially affected devices or real-world...
PT-2024-22283 · Unknown · Charx System Utility
Name of the Vulnerable Software and Affected Versions: CHARX system utility affected versions not specified Description: A local low privileged attacker can exploit an untrusted search path in the CHARX system utility to gain root privileges. Recommendations: At the moment, there is no informatio...
PT-2024-3609 · Microsoft · Windows Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to an integer overflow in the Windows DWM Core Library, which can be exploited to disclose protected information. This allows attackers to obtain...