PT-2024-37931 · Journyx · Journyx

Name of the Vulnerable Software and Affected Versions: Journyx affected versions not specified Description: The issue arises from the generation of password reset tokens using an insecure source of randomness. This allows attackers who are aware of the username of the Journyx installation user to...

PT-2024-37563 · Opentext · Opentext Arcsight Intelligence

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A vulnerability related to incorrect authorization has been identified. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2024-38398 · Trimble · Trimble Sketchup

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...

PT-2024-18902 · Unknown · Resource Manager

Name of the Vulnerable Software and Affected Versions: Resource Manager affected versions not specified Description: The issue is related to memory corruption that occurs when preparing a shared memory notification for a memparcel in Resource Manager. Recommendations: At the moment, there is no...

PT-2024-25067 · Unknown · Hgsl Driver

Name of the Vulnerable Software and Affected Versions: HGSL driver affected versions not specified Description: The issue is related to memory corruption that occurs during memory allocation in the HGSL driver. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-6567 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: An authenticated command injection issue exists in the ArubaOS command line interface, allowing successful exploitation to result in the ability to inject shell commands on the underlying...

PT-2024-6565 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A Path Traversal vulnerability exists in the ArubaOS, related to incorrect restriction of directory path names with limited access. Successful exploitation of this vulnerability allows an...

PT-2024-10382 · Firebird · Firebird

Name of the Vulnerable Software and Affected Versions: Популяционный раковый регистр and Госпитальный раковый регистр affected versions not specified Description: The issue is related to the Firebird component of the software, which stores passwords along with decryption means. This could allow a...

PT-2024-29523 · Accupos · Accupos

Name of the Vulnerable Software and Affected Versions: AccuPOS affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-10607 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a Server-Side Request Forgery SSRF in Apache Struts. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2024-10605 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a remote code execution problem. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendations: At...

PT-2024-10730 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Scripting XSS problem. No specific details about affected devices, real-world incidents, or technical exploitation details are provided...

PT-2024-33125 · Oracle · Oracle Movi Logic

Name of the Vulnerable Software and Affected Versions: Oracle MOVI Logic affected versions not specified Description: The issue concerns a remote code execution vulnerability. No further details are provided about the vulnerability, including any potential impact or exploitation methods...

PT-2024-11629 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: Dropbox affected versions not specified Description: The issue concerns a SQL injection vulnerability. No specific details about the vulnerability, affected devices, or real-world incidents are provided. Recommendations: At the moment, there ...

PT-2024-37880 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

PT-2024-40824 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: FLAC affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the FLAC replaygain synthesis apply gain function, which is called from the write callback and...

PT-2024-28613 · Iaware · Iaware

Name of the Vulnerable Software and Affected Versions: iAware module affected versions not specified Description: The issue is related to a serialisation/deserialisation mismatch in the iAware module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At th...

PT-2024-5277 · Microsoft +3 · Edge +5

Name of the Vulnerable Software and Affected Versions: Chromium affected versions not specified Google Chrome affected versions not specified Microsoft Edge affected versions not specified Description: The issue is related to a buffer overflow in the ANGLE library, which can be exploited by a...

PT-2024-22707 · Hewlett Packard · Hp Application Enabling Software Driver +1

Name of the Vulnerable Software and Affected Versions: HP Application Enabling Software Driver affected versions not specified Description: The issue is related to potential vulnerabilities identified in the HP Display Control software component within the HP Application Enabling Software Driver,...

PT-2024-25214 · Bluestack Systems · Bluestacks

Name of the Vulnerable Software and Affected Versions: BlueStacks affected versions not specified Description: The issue concerns a privilege escalation through VM backdooring. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...