PT-2024-41494 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: libpcap affected versions not specified Description: The software contains a use-of-uninitialized-value issue within the pcpp::NflogLayer::parseNextLayer and pcpp::Packet::setRawPacket functions, as reported by OSS-Fuzz. This issue occurs...

PT-2024-9649 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager AEM affected versions not specified Description: The issue is related to inadequate access control in the Adobe Experience Manager AEM system, which manages content and media data. Exploitation of this issue could all...

PT-2024-12596 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an information disclosure problem. No specific details about the issue are available due to the removal of references and descriptions. Recommendations: At the...

PT-2024-28993 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server affected versions not specified Description: The issue allows an authenticated user to consume file space resources due to unrestricted file uploads. Recommendations: At the moment, there is no information...

PT-2024-5699 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to disclose protected information. There is no information about the...

PT-2024-6529 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for iOS affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. There is ...

PT-2024-5697 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information provided abo...

PT-2024-8113 · Ocean Data Systems · Ocean Data Systems Dream Report

Name of the Vulnerable Software and Affected Versions: Ocean Data Systems Dream Report affected versions not specified Description: The issue is related to an incorrect permission vulnerability. This could allow a local unprivileged attacker to escalate their privileges and potentially cause a...

PT-2024-5741 · Microsoft · Officeplus

Name of the Vulnerable Software and Affected Versions: Microsoft OfficePlus affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It involves incorrect handling of symbolic links before accessing a file, which could allow an attacker to...

PT-2024-5625 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server, which can allow an attacker to...

PT-2024-5653 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory in the Kernel Streaming WOW Thunk Service Driver of Windows operating systems. This can allow an attacker to elevate their privileges...

PT-2024-6182 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System ReFS. It is caused by a buffer overflow in memory, allowing a...

PT-2024-5742

Name of the Vulnerable Software and Affected Versions Azure Stack Hub affected versions not specified Description The issue is related to insufficient input validation in the integrated Azure Stack Hub hybrid cloud computing system. Exploitation of this issue may allow an attacker to elevate thei...

PT-2024-6658 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft PowerPoint, specifically in the parsing of PPTX files. This vulnerability can be exploited to allow an...

PT-2024-5696 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to a use-after-free vulnerability in the WinSock driver of Windows operating systems. This could allow an attacker to elevate thei...

PT-2024-38517

Name of the Vulnerable Software and Affected Versions Transsion Carlcare App affected versions not specified Description A logical vulnerability in the Transsion Carlcare mobile application may lead to user information leakage risks. Recommendations At the moment, there is no information about a...

PT-2024-7369 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server. An attacker can exploit this by sending a specially crafted API request to obtain user informatio...

PT-2024-29988 · Dorsett Controls · Dorsett Controls Infoscan

Name of the Vulnerable Software and Affected Versions: Dorsett Controls InfoScan affected versions not specified Description: The issue concerns a leak of possible sensitive information through the response headers and the rendered JavaScript prior to user login. Recommendations: At the moment,...

PT-2024-29698 · Contacts · Contacts

Name of the Vulnerable Software and Affected Versions: Contacts module affected versions not specified Description: The issue is related to an access permission verification vulnerability in the Contacts module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-37933 · Journyx · Journyx

Name of the Vulnerable Software and Affected Versions: Journyx affected versions not specified Description: The issue allows attackers to craft a malicious link that, when clicked, will execute arbitrary JavaScript in the context of the Journyx web application. Recommendations: At the moment, the...