PT-2024-40774 · Glslang · Glslang

Name of the Vulnerable Software and Affected Versions: glslang affected versions not specified Description: The issue is related to a crash in the glslang software, specifically in the glslang::TInfoSinkBase::location, glslang::TParseContextBase::outputMessage, and glslang::TParseContextBase::err...

RHEL 6 : jasper (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jasper: heap-based buffer over-read of size 8 in jasimagedepalettize in libjasper/base/jasimage.c...

PT-2024-25039 · Unknown · Wpa Supplicant

Name of the Vulnerable Software and Affected Versions: wpa supplicant affected versions not specified Description: The issue is related to a permission verification vulnerability in the wpa supplicant module. Successful exploitation of this vulnerability will affect availability. Recommendations:...

PT-2024-25044 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A race condition vulnerability exists in the binder driver module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no information...

Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to multiple vulnerabilities due to IBM Java

Summary IBM Sterling Connect:Direct Web Service uses IBM Java SE. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-20932 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow a remote...

PT-2024-5502 · Umi Cms · Umi Cms

Name of the Vulnerable Software and Affected Versions: UMI CMS affected versions not specified Description: The issue is related to the lack of protection against SQL query structure exploitation in UMI CMS, a multi-site content management system. This could allow a remote attacker to execute...

PT-2024-5500 · Umi Cms · Umi Cms

Name of the Vulnerable Software and Affected Versions: UMI CMS affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in UMI CMS, a multi-site content management system. This could allow a remote attacker to execute...

PT-2024-25516 · Qt · Qt Framework

Name of the Vulnerable Software and Affected Versions: Qt Framework affected versions not specified Description: The issue could be exploited in applications that make use of the QStringDecoder. There is no information about the estimated number of potentially affected devices worldwide or...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to unspecified vulnerability in Java SE ( CVE-2024-20926)

Summary Potential unspecified vulnerability in Java SE related to the VM component CVE-2024-20926 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details...

PT-2024-19061 · F5 · Big-Ip Next Central Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Next Central Manager affected versions not specified Description: An OData injection vulnerability exists in the BIG-IP Next Central Manager API. The issue affects the API endpoint, but specific details about the endpoint, such as...

CVE-2024-3661

creationtimestamp| type| source ---|---|--- 2024-05-07 11:05:02+00:00| published-proof-of-concept| https://t.me/habrcomnews/27495 2024-05-07 12:31:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/125 2024-05-07 13:47:48+00:00| published-proof-of-concept|...

PT-2024-13100 · Video · Video

Name of the Vulnerable Software and Affected Versions: Video affected versions not specified Description: The issue is related to information disclosure while parsing the dts header atom in Video. There is no information about the estimated number of potentially affected devices worldwide or...

PT-2024-18896 · Qualcomm · Snapdragon +48

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to memory corruption that occurs when a channel ID provided by a user is not properly validated and is subsequently used. This can lead to potential security risks...

PT-2024-18901 · Qualcomm · Snapdragon +101

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when playing an audio file with a large-sized input buffer. There is no information provided about the...

PT-2024-15342 · Nvidia · Nvidia Chatrtx

Name of the Vulnerable Software and Affected Versions: NVIDIA ChatRTX for Windows affected versions not specified Description: The issue concerns a clear-text transmission of sensitive information, potentially leading to information disclosure through data sniffing. This could be exploited by a...

PT-2024-13094 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is related to memory corruption that occurs when multiple listeners are being registered with the same file descriptor. Recommendations: At the moment, there is no information about...

PT-2024-40756 · Avif · Avif

Name of the Vulnerable Software and Affected Versions: avif affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the avifSequenceHeaderParse function, which is called by avifDecoderReset and avifDecoderParse...

PT-2024-22252 · Solarwinds · Serv-U Ftp Server

Name of the Vulnerable Software and Affected Versions: Serv-U FTP server affected versions not specified Description: A highly privileged account can overwrite arbitrary files on the system with log output due to improper sanitization of log file path tags. Recommendations: At the moment, there i...

PT-2024-31202 · Gescen · Gescen

Name of the Vulnerable Software and Affected Versions: Gescen affected versions not specified Description: The issue allows an attacker to send a specially crafted SQL query to the pass parameter and retrieve all the data stored in the database. This is a SQL injection vulnerability...

PT-2024-12988 · Motorola · Motorola Phone Calls

Name of the Vulnerable Software and Affected Versions: Motorola Phone Calls affected versions not specified Description: An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data...