PT-2024-22127 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo Printers affected versions not specified Description: A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer without authentication. Recommendations: At the moment, there...

PT-2024-7765

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted 3DM file can cause a memory corruption issue when parsed through Autodesk applications using opennurbs.dll and ASMkern229A.dll, potentially leading to code...

PT-2024-24015 · Unknown · Uvdesk Community Skeleton

Name of the Vulnerable Software and Affected Versions: uvdesk/community-skeleton affected versions not specified Description: The issue concerns improper privilege management. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-12374 · Qualcomm · 215 Mobile Firmware +307

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while processing the finish sign command, specifically when attempting to pass a rsp buffer. This can...

PT-2024-18539 · Flashc · Flashc

Name of the Vulnerable Software and Affected Versions: flashc affected versions not specified Description: The issue is related to a possible out of bounds write due to an uncaught exception in flashc. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2024-18529 · Mediatek +1 · Mt6739 +29

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interactio...

PT-2024-21014 · Unknown · Getdiae Uslistparameters

Name of the Vulnerable Software and Affected Versions: GetDIAE usListParameters affected versions not specified Description: A SQL injection issue exists in GetDIAE usListParameters. This allows for potential exploitation. No information is provided about the estimated number of affected devices ...

PT-2024-18528 · Mediatek +1 · Mt6739 +29

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interactio...

PT-2024-12171 · Unknown · Sps Application

Name of the Vulnerable Software and Affected Versions: SPS Application affected versions not specified Description: The issue concerns memory corruption in the SPS Application when requesting a public key in the sorter TA. Recommendations: At the moment, there is no information about a newer...

PT-2024-18886 · Unknown · V13K Decoder

Name of the Vulnerable Software and Affected Versions: v13k decoder affected versions not specified Description: The issue is related to memory corruption that occurs while processing Codec2 during v13k decoder pitch synthesis. Recommendations: At the moment, there is no information about a newer...

PT-2024-18893 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to memory corruption in the Kernel while handling GPU operations. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2024-27207

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an overflow in the blk ioctl discard function when the start + len parameter exceeds the maximum allowed value. This can cause a hung task if a discard ioctl is...

CVE-2024-29237

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in ActionRule.Delete webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and...

CVE-2024-29236

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in AudioPattern.Delete webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

CVE-2024-29232

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Alert.Enum webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct...

CVE-2024-29228

Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2024-29241

The CVE-2024-29241 issue affects Synology Surveillance Station’s System webapi component. A missing authorization vulnerability permits remote authenticated users to access non-sensitive information, and to write sensitive DSM configurations or trigger reboot/shutdown of the NAS via unspecified v...

CVE-2024-29239

Summary (CVE-2024-29239) : A SQL injection vulnerability exists in the Recording.CountByCategory webapi component of Synology Surveillance Station prior to 9.2.0-11289 and 9.2.0-9289. The issue stems from improper neutralization of special elements in SQL commands, enabling remote authenticated u...

CVE-2024-29239

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Recording.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information...

CVE-2024-29235

The CVE-2024-29235 issue affects Synology Surveillance Station’s IOModule.EnumLog webapi component, where improper neutralization of input enables SQL Injection. Affected products/versions are Synology Surveillance Station before 9.2.0-11289 and before 9.2.0-9289. The vulnerability allows remote ...