PT-2024-15634

Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle affected versions not specified Description The issue arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources...

PT-2024-11606 · WordPress +1 · Form Vibes

Name of the Vulnerable Software and Affected Versions: Plugin affected versions not specified Description: The issue arises from the plugin's failure to filter the delete entries parameter from user requests, leading to an SQL Injection vulnerability. There is no information provided about the...

PT-2024-11965 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a rejected reason related to CNA rules,...

PT-2024-5110 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information due to a Directory Traversal and Information Disclosure...

PT-2024-1125 · Microsoft · Windows Core Messaging +1

Name of the Vulnerable Software and Affected Versions: Windows CoreMessaging affected versions not specified Description: The issue is related to insufficient access control in the CoreMessaging service of the Windows operating system. Exploitation of this issue may allow an attacker to disclose...

PT-2024-13913 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to an Improper Access Control vulnerability in Controller APIs. Certain API endpoints, such as "/api/v1/login" or "/users/id", are accessible to Customer...

PT-2024-12377 · Unknown · Tz Secure Os

Name of the Vulnerable Software and Affected Versions: TZ Secure OS affected versions not specified Description: The issue is related to memory corruption in TZ Secure OS when requesting a memory allocation from the TA region. Recommendations: At the moment, there is no information about a newer...

PT-2024-12363 · Unknown · Modem Ims Sms Ua

Name of the Vulnerable Software and Affected Versions: Modem IMS SMS UA affected versions not specified Description: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges...

PT-2023-24029 · WordPress · Woocommerce Product Add-Ons

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Add-Ons versions n/a through 6.1.3 Description: The issue is related to the deserialization of untrusted data in WooCommerce Product Add-Ons. This can potentially lead to security issues, but specific details about...

PT-2023-28021 · Unknown · Login/Logout Redirect

Name of the Vulnerable Software and Affected Versions: Swapnil V. Patil Login and Logout Redirect versions n/a through 2.0.3 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Login and Logout...

PT-2023-27577 · Joomla · Proforms Basic

Name of the Vulnerable Software and Affected Versions: Proforms Basic component for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla. Recommendations: At the moment, there is no information about a newer...

PT-2023-31090 · Braincert · Braincert – Html5 Virtual Classroom

Name of the Vulnerable Software and Affected Versions: BrainCert – HTML5 Virtual Classroom versions n/a through 1.30 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in BrainCert –...

PT-2023-20988 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A vulnerability alert has been issued, but details about the issue are not provided. The estimated number of potentially affected devices and...

PT-2023-31350 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue originates from a private repository. No further details are provided about the nature of the issue or its potential impact...

PT-2023-31130 · Unknown · Email Module

Name of the Vulnerable Software and Affected Versions: Email module affected versions not specified Description: The issue concerns unauthorized access to email attachments within the email module, potentially affecting service confidentiality. Recommendations: At the moment, there is no...

PT-2023-28516 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a possible missing permission check in the telecom service, which could lead to local escalation of privilege without requiring additional execution...

PT-2023-24147 · Unknown · Ap Firmware

Name of the Vulnerable Software and Affected Versions: AP firmware affected versions not specified Description: The issue is related to memory corruption that occurs when sending SMS from the AP firmware. Recommendations: At the moment, there is no information about a newer version that contains ...

PT-2023-32433 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft affected versions not specified Description: The issue is a stack-based buffer overflow that may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file...

PT-2023-28536 · Unknown · Firewall Service

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue concerns a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges...

PT-2023-28490 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: imsservice affected versions not specified Description: The issue is related to a missing permission check in imsservice, allowing an app's permission usage records to be written. This could lead to local information disclosure without...