PT-2024-6629 · Loway · Loway Queuemetrics

Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to a URL redirection to an untrusted site, also known as an 'Open Redirect'. This occurs when loading the login page, allowing a remote attacker to redirect ...

PT-2024-18570 · Mediatek · Mediatek

Name of the Vulnerable Software and Affected Versions: MediaTek products affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check, which could lead to local information disclosure with System execution privileges needed. User...

PT-2024-31525 · Sayful Islam · Carousel Slider

Name of the Vulnerable Software and Affected Versions: WordPress plugin Carousel Slider affected versions not specified Description: The WordPress plugin Carousel Slider provided by Sayful Islam contains a cross-site request forgery issue on the Hero image selection feature. When a user is logged...

PT-2024-40032 · Pypi · Spam

Name of the Vulnerable Software and Affected Versions: spam project on PyPI affected versions not specified Description: The issue concerns a compromise of the spam project on PyPI via a phishing attack, leading to a malicious release that downloads and runs malware at install time by accessing...

PT-2024-38944 · Gether Technology · 6Shr System

Name of the Vulnerable Software and Affected Versions: 6SHR system from Gether Technology affected versions not specified Description: The 6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers with regular privilege to inject SQL...

PT-2024-29357 · Unknown · Instantcms

Name of the Vulnerable Software and Affected Versions: InstantCMS affected versions not specified Description: The issue is related to Stored Cross Site Scripting XSS. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-29522 · Barix · Barix

Name of the Vulnerable Software and Affected Versions: Barix affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-29874 · Hargal · Hargal

Name of the Vulnerable Software and Affected Versions: Hargal affected versions not specified Description: The issue is related to improper access control, which is classified as CWE-284. This is a critical issue with a high severity score. No information is provided about the estimated number of...

PT-2024-30036 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System via the medium parameter at the "substaff.php" endpoint. This allows for potential exploitation. No...

PT-2024-24983 · Google · Nest

Name of the Vulnerable Software and Affected Versions: Nest production devices affected versions not specified Description: The issue concerns the libcurl CURLOPT SSL VERIFYPEER option being disabled on a subset of requests made by Nest production devices. This enabled a potential man-in-the-midd...

PT-2024-41066 · Мир Кт-51 · Мир Кт-51

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 affected versions not specified Description: The issue is related to information disclosure during data transmission. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment, there is no informatio...

PT-2024-40855 · Jq · Jq

Name of the Vulnerable Software and Affected Versions: jq affected versions not specified Description: The issue is related to a heap buffer overflow read, which occurs in the jq software. The crash state indicates that the functions jv parse, f tonumber, and jq next are involved in the issue...

PT-2024-29539 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP affected versions not specified Description: Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note that software versions which have reached End of Technical Support EoTS are not...

PT-2024-5549 · Aveva · Aveva Suitelink Server +5

Name of the Vulnerable Software and Affected Versions: AVEVA SuiteLink Server affected versions not specified Description: The issue is related to unlimited resource allocation in the SuiteLink server of AVEVA software products, including Historian, InTouch, Application Server, Communication...

PT-2024-6832 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to unrestricted file upload of dangerous types. An authenticated attacker can upload malicious code over the network, which...

PT-2024-5835 · Pimax · Pimax

Name of the Vulnerable Software and Affected Versions: Pimax products affected versions not specified Description: The issue concerns the implementation of the WebSocket protocol in Pimax applications for launching and managing Pimax Play games and PiTool software for configuring and calibrating ...

PT-2024-25068 · Qualcomm · Snapdragon +138

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when creating a fence to wait on timeline events and simultaneously signaling timeline events...

PT-2024-29289 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateways affected versions not specified Description: An authenticated command injection issue exists in the Command Line Interface of the affected software. This allows for the execution of arbitrary...

PT-2024-37794 · Uberagent · Uberagent

Name of the Vulnerable Software and Affected Versions: uberAgent affected versions not specified Description: The issue concerns a privilege escalation in uberAgent. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2024-40933 · Unknown · Opentelemetry Api

Name of the Vulnerable Software and Affected Versions: opentelemetry api affected versions not specified Description: The opentelemetry api has been moved into the opentelemetry crate. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...