PT-2024-34097 · Citrix · Citrix Workspace App For Mac

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Mac affected versions not specified Description: The issue concerns a problem with Citrix Workspace app for Mac. There is no information about the estimated number of potentially affected devices worldwide or details...

PT-2024-8981 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a hardlockup on vmap stack overflow in the powerpc/32 component of the Linux kernel. This occurs because the emergency ctx is still addressed with its virtual...

PT-2024-23878 · Unknown · S2Member Pro

Name of the Vulnerable Software and Affected Versions: s2Member Pro versions n/a through 240315 Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation. Recommendations: For versions n/a through 240315, update to a version that addresses the Improper...

PT-2024-25046 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a cracking vulnerability in the OS security module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there i...

PT-2024-15304 · Google · Android

Name of the Vulnerable Software and Affected Versions: SnoozeHelper.java affected versions not specified Description: The issue is related to multiple functions in SnoozeHelper.java, where a possible way to cause a boot loop due to resource exhaustion exists. This could lead to local denial of...

PT-2024-18897 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing a protected 802.11az Fine Time Measurement FTM frame. This affects the parsing of specific...

PT-2024-25289 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: An unauthenticated Denial of Service DoS issue exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this issue results in the ability to...

PT-2024-14798 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue is related to a server receiving a malformed message based on a list of IPs, resulting in heap corruption and causing a denial of service. Recommendations: At the moment, there ...

PT-2024-14802 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue occurs when a server receives a malformed message, causing a pointer to be overwritten. This can result in remote code execution or failure. Recommendations: At the moment, ther...

PT-2024-3015 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Local Security Authority Subsystem Service LSASS of Windows operating system...

PT-2024-3129 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft OLE DB Driver for SQL Server, which can be exploited by a remote attacker to execute...

PT-2024-2829 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. This can potentially allow...

PT-2024-3011 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to disclose protected information. There is no information provided about t...

PT-2024-3112 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft OLE DB Driver for SQL Server, which can be exploited by a remote attacker to execute...

PT-2024-23607 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability due to insufficient file upload validation. Recommendations: At the moment, there is no information about a newer...

PT-2024-7967

Name of the Vulnerable Software and Affected Versions GRUB2 affected versions not specified Description The issue is related to GRUB2 not calling the module fini functions on exit, which leads to the peimage GRUB2 module leaving UEFI system table hooks after exit. This results in a use-after-free...

PT-2024-23609 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: A remote command execution issue has been identified. The estimated number of potentially affected devices worldwide is not available. Details about real-world incidents where this...

PT-2024-2933 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions 9.x through 22.x Ivanti Policy Secure affected versions not specified Description: A null pointer dereference vulnerability in the IPSec component allows an unauthenticated malicious user to send specially craft...

PT-2024-23256 · Unknown · Io-1020 Micro Eld

Name of the Vulnerable Software and Affected Versions: IO-1020 Micro ELD affected versions not specified Description: The issue concerns the use of a default WIFI password in the IO-1020 Micro ELD, which could allow an adjacent attacker to connect to the device. There is no information provided...

PT-2024-21231 · Unknown · Diae Taghandler.Ashx

Name of the Vulnerable Software and Affected Versions: DIAE tagHandler.ashx affected versions not specified Description: A SQL injection vulnerability exists in the script DIAE tagHandler.ashx. This issue allows for potential SQL injection attacks. No information is provided about the estimated...