PT-2024-18891 · Qualcomm · Snapdragon +29

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs during the allocation of memory for graphics. Recommendations: At the moment, there is no information...

PT-2024-13088 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided. Description: The issue involves memory corruption in HLOS when running kernel address sanitizers syzkaller on tmecom with DEBUG FS enabled. Recommendations: At the moment, there is no...

PT-2024-21009 · Delta Electronics · Diaenergie

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A path traversal attack is possible, allowing writes outside of the intended directory and potentially accessing sensitive information. If a file name i...

Sensitive Information Disclosure

Directus is vulnerable to an Sensitive Information Disclosure. The vulnerability is due to insecure handling of version information, as the exact version number is included in compiled JS bundles that are accessible without authentication. This exposes potential information that a malicious...

PT-2024-13121 · Qualcomm · Snapdragon +150

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when parsing a qcp clip with an invalid chunk data size. Recommendations: At the moment,...

CentOS 9 : mingw-binutils-2.40-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the mingw-binutils-2.40-3.el9 build changelog. - A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...

PT-2024-21134 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is a memory leak vulnerability located in /libming/src/actioncompiler/listaction.c. Recommendations: For libming version 0.4.8, consider restricting access to the vulnerable file listaction.c to...

PT-2024-21592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a dc state NULL check in dc state release. The issue is addressed by checking whether the state is NULL before releasing i...

CVE-2024-22200 vantage6-UI docker image leaks software version information

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0...

CVE-2024-23174

An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via the rev-deleted-user, pagetriage-tags-quickfilter-label, pagetriage-triage, pagetriage-filter-date-range-format-placeholder,...

NetworkSherlock - Powerful And Flexible Port Scanning Tool With Shodan

NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, NetworkSherlock can efficiently scan IP ranges, CIDR blocks, and multiple targets. It stands out with its detailed banner grabbing...

CVE-2022-36777

IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0could allow an authenticated user to obtain sensitive version information that could aid in further attacks against the system. IBM X-Force ID: 233665...

CVE-2022-36777

CVE-2022-36777 affects IBM Cloud Pak for Security (CP4S) 1.10.0.0–1.10.11.0 and IBM QRadar Suite Software 1.10.12.0–1.10.16.0, enabling an authenticated user to obtain sensitive version information that could aid subsequent attacks. The issue is described as an information-disclosure vulnerabilit...

PT-2023-30198

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is an out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Vulnerability Details fofa： title="BIG-IP" || i...

CVE-2023-5516

Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical detai...

Hitachi Energy Electronic Shift Operations Management System Security Vulnerability

Hitachi Energy Electronic Shift Operations Management System is Hitachi's management platform for ensuring the safe, efficient and reliable operation and maintenance of mission-critical plant facilities and assets. A security vulnerability exists in Hitachi Energy Electronic Shift Operations...

RHEL 8 : binutils (RHSA-2023:6236)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6236 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

PT-2023-27286 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a confused deputy in the isFullScreen function of FillUi.java, which could allow viewing another user's images. This leads to...

CVE-2021-38859

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a specially crafted HTTP request that could be used in further attacks against the system. IBM X-Force ID: 207899...