PT-2024-5164 · Gitoxide · Gitoxide

Name of the Vulnerable Software and Affected Versions: gitoxide versions prior to 0.35.0 gitoxide versions prior to 0.42.0 gitoxide versions prior to 0.62.0 Description: The issue is related to the gix-transport component of gitoxide, which does not properly check the username part of a URL for...

PT-2024-2997 · Siemens · Teamcenter Visualization +2

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V35.1.254 Parasolid versions prior to V36.0.207 Parasolid versions prior to V36.1.147 JT2Go versions prior to V2312.0004 Teamcenter Visualization versions prior to V14.2.0.12 Teamcenter Visualization versions prior...

PT-2024-23852

Name of the Vulnerable Software and Affected Versions oidcc versions prior to 3.0.2 oidcc versions prior to 3.1.2 oidcc versions prior to 3.2.0-beta.3 Description A Denial of Service DoS by Atom exhaustion is possible by calling oidcc provider configuration worker:get provider configuration/1 or...

Micro Focus ZENworks Configuration Management 安全漏洞

Micro Focus ZENworks Configuration Management is an endpoint device management software from Micro Focus UK that provides a single management platform for all of a user's endpoint devices, reducing costs and improving IT. A security vulnerability exists in Micro Focus ZENworks Configuration...

PT-2024-22346 · Eprosima +1 · Eprosima Fast Dds +1

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.14.0 eprosima Fast DDS versions prior to 2.13.4 eprosima Fast DDS versions prior to 2.12.3 eprosima Fast DDS versions prior to 2.10.4 eprosima Fast DDS versions prior to 2.6.8 Description: The issue is...

PT-2024-19605 · Ipswitch · Moveit Transfer

Name of the Vulnerable Software and Affected Versions: MOVEit Transfer versions prior to 2022.0.11 14.0.11 MOVEit Transfer versions prior to 2022.1.12 14.1.12 MOVEit Transfer versions prior to 2023.0.9 15.0.9 MOVEit Transfer versions prior to 2023.1.4 15.1.4 Description: A logging bypass issue ha...

PT-2024-4083 · 12D Solutions · 12D Synergy File Replication Server +1

Name of the Vulnerable Software and Affected Versions: 12d Synergy Server versions prior to 4.3.10.192 12d Synergy Server versions prior to 5.1.5.221 12d Synergy Server versions prior to 5.1.6.235 12d Synergy File Replication Server versions prior to 4.3.10.192 12d Synergy File Replication Server...

PT-2024-20096 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application, allowing users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other...

PT-2024-13031 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.8 IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.2.3 Description: The issue allows attackers to obtain cookie values by sending a http link...

PT-2024-1639 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.4.2596 build 20231128 QuTS hero versions prior to h5.1.4.2596 build 20231128 QuTScloud versions prior to c5.1.5.2651 Description: A buffer copy without checking size of input vulnerability has been reported to affect...

PT-2024-19403

Name of the Vulnerable Software and Affected Versions ClickHouse versions prior to 24.0.2.54535 ClickHouse version 23.1 Description A bug exists in ClickHouse that allows query caching to bypass role-based access controls and policies. This means that attackers with control of a role could guess...

PT-2024-13800 · Silverstripe · Silverstripe/Admin

Name of the Vulnerable Software and Affected Versions: Silverstripe Admin versions 1.x prior to 1.13.19 Silverstripe Admin versions 2.x prior to 2.1.8 Description: The issue allows users who don't have edit or delete permissions for records exposed in a ModelAdmin to still edit or delete records...

PT-2024-1658 · Mbed Tls +3 · Mbed Tls +3

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions 2.x before 2.28.7 Mbed TLS versions 3.x before 3.5.2 Description: A timing side channel in RSA private operations could allow a local attacker to recover the plaintext by sending a large number of messages for decryption, as...

PT-2024-1112 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3 Junos OS versions prior to 22.1R3 Junos OS versions prior to 22.2R3 Junos OS Evolved versions prior to 21.4R3-EVO Junos OS Evolved versions prior to 22.1R3-EVO Junos OS Evolved versions prior to 22.2R3-EVO...

PT-2024-14870 · WordPress · Payhere Payment Gateway

Name of the Vulnerable Software and Affected Versions: PayHere Payment Gateway WordPress plugin versions prior to 2.2.12 Description: The issue arises from the automatic creation of publicly-accessible log files containing sensitive information when transactions occur. This affects the PayHere...

PT-2023-8361 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 macOS Sonoma versions prior to 14.1...

PT-2023-6378 · Openvpn · Openvpn Connect

Name of the Vulnerable Software and Affected Versions: OpenVPN Connect versions before 3.4.0.4506 macOS OpenVPN Connect versions before 3.4.0.3100 Windows Description: The issue is related to errors in the certificate authentication procedure, allowing a remote attacker to perform a...

PT-2023-8515 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.2.2533 build 20230926 QuTS hero versions prior to h5.1.2.2534 build 20230927 QuTScloud versions prior to c5.1.5.2651 Description: A heap-based buffer overflow vulnerability has been reported to affect several QNAP...

PT-2023-4794 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.2.12 Splunk Enterprise versions prior to 9.0.6 Splunk Enterprise versions prior to 9.1.1 Description: The issue is related to an absolute path traversal that can be exploited to execute arbitrary code...

PT-2023-5323 · Microsoft +1 · Powershell +2

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to an Untrusted Search Path vulnerability and imprope...