PT-2024-29736 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a NULL pointer check in the Linux kernel's drm/xe/xe devcoredump module. Specifically, it involves checking if 'coredump' is not NULL before assigning 'xe devcoredum...

PT-2024-2683 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to a business logic error in Zoom's meeting chat component, which is associated with incorrect handling of logical operations. This error may allow a remote attacker to...

PT-2024-20509 · WordPress · Wp Auto Listings

Name of the Vulnerable Software and Affected Versions: Auto Listings – Car Listings & Car Dealership Plugin for WordPress versions n/a through 2.6.5 Description: The issue affects the WP Auto Listings plugin, allowing Stored XSS due to improper neutralization of input during web page generation...

PT-2024-13087 · Qualcomm · 315 5G Iot Modem Firmware +239

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption while processing the event ring. The context read pointer is untrusted and can be passed with arbitrary values,...

CVE-2024-22162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPZOOM WPZOOM Shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through 1.0.3...

PT-2024-13312 · Gnome · Gnome Gtk

Name of the Vulnerable Software and Affected Versions: Gnome GTK affected versions not specified Description: The issue is related to a null pointer dereference in Gnome GTK, specifically via the parse settings function at xsettings-client.c. Recommendations: At the moment, there is no informatio...

PT-2023-35652 · Git +1 · Binutils

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as memory bstat, bfd get size, and bfd get file...

PT-2023-32698 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in kubeflow/kubeflow. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2023-18168 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the Settings application, allowing a user to change the SIM card. This could lead to local escalation of privilege without requirin...

PT-2023-35870 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the NetworkInterface::dissectPacket function, as...

PT-2023-2425 · Microsoft · Windows Registry +1

Name of the Vulnerable Software and Affected Versions: Windows Registry affected versions not specified Description: The issue is related to insufficient access control in the Windows Registry, which can be exploited to elevate privileges. This could allow an attacker to affect the system. There ...

PT-2023-12851 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

GPAC MP4Box 资源管理错误漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A resource management error vulnerability exists in GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b,...

PT-2022-36764 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow error, specifically a READ 1 type crash. The crash occurs in the following functions: parse content length...

PT-2022-5396 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to an integer overflow in the QuickTimeVideo::userDataDecoder function of the quicktimevideo.cpp file in the QuickTime Video Handler component. This can be exploited...

PT-2022-37515 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: crash affected versions not specified Description: The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild with a new secure boot key. Recommendations: At the moment, there is no information about a newer version th...

IBM Sterling B2B Integrator Redirection Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

ALPINE-CVE-2018-6758

The uwsgiexpandpath function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length...

PT-1999-1010 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows the 'finger' command to potentially disclose information about user accounts on certain systems when used with specific syntax, such as '0@host'. Recommendations: At the...