PT-2024-41051 · Xxd · Xxd

Name of the Vulnerable Software and Affected Versions: xxd affected versions not specified Description: The issue is related to a buffer overflow in xxd when colored output is used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-6405 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

PT-2024-21888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport busy delay in the netrom component. This issue affects the Linux kernel. Recommendations: At the moment, there is n...

PT-2024-24918 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo printers affected versions not specified Description: A buffer overflow issue was identified in some Lenovo printers, allowing an unauthenticated user to trigger a device restart by sending a specially crafted web request...

PT-2024-40152 · Pypi · Pygmentize

Name of the Vulnerable Software and Affected Versions: pygmentize affected versions not specified Description: The issue is related to remote code execution due to unsafe sanitization of user input when passed to the highlight function. Recommendations: At the moment, there is no information abou...

PT-2024-40258 · Monolog · Monolog

Name of the Vulnerable Software and Affected Versions: Monolog library affected versions not specified Description: A header injection issue has been identified in the NativeMailerHandler of the Monolog library, potentially allowing an attacker to manipulate email headers when log messages are se...

PT-2024-22232 · Unknown · Powersystem Center

Name of the Vulnerable Software and Affected Versions: PowerSYSTEM Center affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in PowerSYSTEM Center. No specific details about the nature of the vulnerabilities, affected devices, or...

PT-2024-40413 · Packagist · Drupal Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: A visit to the install.php endpoint can cause cached data to become corrupted, potentially impairing a site until caches are rebuilt. Recommendation...

PT-2024-4720 · Microsoft · Net Core

Name of the Vulnerable Software and Affected Versions: .NET Core versions affected versions not specified Description: The issue is related to an incorrect restriction of directory path names in the .NET Core software component "Сервис обновлений". This could allow a remote attacker to gain read...

PT-2024-40266 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal affected versions not specified Description: The issue is related to an access bypass in Drupal's content moderation system. Under certain conditions, it fails to properly check a user's access to use specific transitions...

PT-2024-3611 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system. No information is provided...

PT-2024-3609 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to an integer overflow in the Windows DWM Core Library, which can be exploited to disclose protected information. This allows attackers to obtain...

PT-2024-22283 · Unknown · Charx System Utility

Name of the Vulnerable Software and Affected Versions: CHARX system utility affected versions not specified Description: A local low privileged attacker can exploit an untrusted search path in the CHARX system utility to gain root privileges. Recommendations: At the moment, there is no informatio...

PT-2024-18178 · Ge Healthcare · Ge Healthcare Ultrasound Devices

Name of the Vulnerable Software and Affected Versions: GE HealthCare ultrasound devices affected versions not specified Description: The issue concerns OS command injection vulnerabilities. No further details are provided about the estimated number of potentially affected devices or real-world...

PT-2024-25044 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A race condition vulnerability exists in the binder driver module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no information...

PT-2024-25039 · Unknown · Wpa Supplicant

Name of the Vulnerable Software and Affected Versions: wpa supplicant affected versions not specified Description: The issue is related to a permission verification vulnerability in the wpa supplicant module. Successful exploitation of this vulnerability will affect availability. Recommendations:...

PT-2024-40774 · Glslang · Glslang

Name of the Vulnerable Software and Affected Versions: glslang affected versions not specified Description: The issue is related to a crash in the glslang software, specifically in the glslang::TInfoSinkBase::location, glslang::TParseContextBase::outputMessage, and glslang::TParseContextBase::err...

PT-2024-25516 · Qt · Qt Framework

Name of the Vulnerable Software and Affected Versions: Qt Framework affected versions not specified Description: The issue could be exploited in applications that make use of the QStringDecoder. There is no information about the estimated number of potentially affected devices worldwide or...

PT-2024-19061 · F5 · Big-Ip Next Central Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Next Central Manager affected versions not specified Description: An OData injection vulnerability exists in the BIG-IP Next Central Manager API. The issue affects the API endpoint, but specific details about the endpoint, such as...

PT-2024-13094 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is related to memory corruption that occurs when multiple listeners are being registered with the same file descriptor. Recommendations: At the moment, there is no information about...