PT-2024-9982 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: The issue is related to a "use after free" code execution vulnerability. This vulnerability could allow a threat actor to craft a DOE file and force the software to use a...

PT-2024-21708 · Toshiba · Toshiba Tec

Name of the Vulnerable Software and Affected Versions: Toshiba Tec products affected versions not specified Description: The issue allows an attacker to achieve Remote Code Execution through the Remote Command program. This can be executed in combination with other vulnerabilities, making it...

PT-2024-10118

Name of the Vulnerable Software and Affected Versions dogtag-pki and pki-core affected versions not specified Description The issue is related to an authentication bypass in dogtag-pki and pki-core due to an original error. This can be exploited by a remote attacker to escalate their privileges...

PT-2024-4358

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description The issue is related to a potential vulnerability in the system BIOS of certain HP PC products, which could allow escalation of privileges and code execution. This is due to incorrect...

PT-2024-6420 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2024-6410 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to an out-of-bounds read in the memory due to improper validation of user-supplied data when parsing EMF files. This can allow remote attackers to disclose...

PT-2024-4052 · Red Hat · Openshift Telemeter

Name of the Vulnerable Software and Affected Versions: OpenShift Telemeter affected versions not specified Description: The issue is related to a flaw in OpenShift's Telemeter that allows an attacker to bypass authentication using a forged token. This can be done by exploiting the "iss" check...

PT-2024-25023 · Unknown · Envoyproxy

Name of the Vulnerable Software and Affected Versions: Envoyproxy affected versions not specified Description: The issue arises when Envoyproxy, equipped with a Brotli filter, encounters an endless loop during the decompression of Brotli data that contains extra input. This can occur in Envoy, a...

PT-2024-18559 · Dmc · Dmc

Name of the Vulnerable Software and Affected Versions: dmc affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction...

PT-2024-35407 · Sonos · Sonos Era 100

Name of the Vulnerable Software and Affected Versions: Sonos Era 100 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this issue...

PT-2024-36477 · Luxion · Luxion Keyshot

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this, where the target must visit a...

PT-2024-35524 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the target must...

PT-2024-40060 · Form · Form

Name of the Vulnerable Software and Affected Versions: form affected versions not specified Description: The issue arises from the improper encoding of user input in frontend forms handled by the form framework, leading to cross-site scripting. Recommendations: At the moment, there is no...

PT-2024-40211 · Unknown · Form Framework

Name of the Vulnerable Software and Affected Versions: Form Framework affected versions not specified Description: A cross-site scripting issue has been found in the Form Framework related to the output of field validation errors. Recommendations: At the moment, there is no information about a...

PT-2024-40419 · Unknown · Titan Framework

Name of the Vulnerable Software and Affected Versions: titon/framework package affected versions not specified Description: The issue allows for remote code execution via a Chosen-Ciphertext Attack. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2024-40424 · Stormpath · Stormpath-Sdk-Php

Name of the Vulnerable Software and Affected Versions: stormpath-sdk-php affected versions not specified Description: The issue is related to the use of an insecure random number generator RNG in the generation of UUID version 4 within the codebase. Recommendations: At the moment, there is no...

PT-2024-4148 · Apache · Apache Directory Ldap Api

Name of the Vulnerable Software and Affected Versions: Apache Directory LDAP API affected versions not specified Description: The issue is related to a lack of control over user-input data in the LDAP URL parser component. This can be exploited by a remote attacker to cause a denial of service...

PT-2024-21283 · Unknown · Substation Server

Name of the Vulnerable Software and Affected Versions: Substation Server affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in Substation Server. No specific details about the nature of the vulnerabilities, affected devices, or real-worl...

PT-2024-40479 · Osv · Osv

Name of the Vulnerable Software and Affected Versions: OSV affected versions not specified Description: The issue concerns a form that may populate a PasswordField with submitted data, reflecting it back to the user. This behavior is not considered best practice, as it may expose the user's own...

PT-2024-36006

Name of the Vulnerable Software and Affected Versions: Openfind Mail2000 affected versions not specified Description: The issue is related to improper filtering of parameters in specific CGI, allowing remote attackers with regular privileges to execute arbitrary system commands on the remote...