PT-2024-18896 · Qualcomm · Snapdragon +48

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to memory corruption that occurs when a channel ID provided by a user is not properly validated and is subsequently used. This can lead to potential security risks...

PT-2024-13100 · Video · Video

Name of the Vulnerable Software and Affected Versions: Video affected versions not specified Description: The issue is related to information disclosure while parsing the dts header atom in Video. There is no information about the estimated number of potentially affected devices worldwide or...

PT-2024-15342 · Nvidia · Nvidia Chatrtx

Name of the Vulnerable Software and Affected Versions: NVIDIA ChatRTX for Windows affected versions not specified Description: The issue concerns a clear-text transmission of sensitive information, potentially leading to information disclosure through data sniffing. This could be exploited by a...

PT-2024-40756 · Avif · Avif

Name of the Vulnerable Software and Affected Versions: avif affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the avifSequenceHeaderParse function, which is called by avifDecoderReset and avifDecoderParse...

PT-2024-22252 · Solarwinds · Serv-U Ftp Server

Name of the Vulnerable Software and Affected Versions: Serv-U FTP server affected versions not specified Description: A highly privileged account can overwrite arbitrary files on the system with log output due to improper sanitization of log file path tags. Recommendations: At the moment, there i...

PT-2024-31202 · Gescen · Gescen

Name of the Vulnerable Software and Affected Versions: Gescen affected versions not specified Description: The issue allows an attacker to send a specially crafted SQL query to the pass parameter and retrieve all the data stored in the database. This is a SQL injection vulnerability...

PT-2024-3241 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel affected versions not specified Description: The issue is related to the processing of relative paths in the PowerPanel system, which can be exploited by importing a specially crafted Zip file containing path traversal...

PT-2024-24228

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap affected versions not specified Description The issue allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component. Recommendations At the moment, there i...

PT-2024-25663 · Unknown · O-Ran E2T I-Release

Name of the Vulnerable Software and Affected Versions: O-RAN E2T I-Release affected versions not specified Description: The issue concerns the O-RAN E2T I-Release Prometheus metric Increment function, which can crash in sctpThread.cpp. This crash occurs when the Increment function is called for...

PT-2024-30256 · Unknown · Super 8 Live Chat

Name of the Vulnerable Software and Affected Versions: Super 8 Live Chat affected versions not specified Description: The issue allows unauthenticated remote attackers to insert JavaScript code into the chat box due to a failure to properly filter user input. When the message recipient views the...

PT-2024-3513 · Huawei · Huawei Home Routers

Name of the Vulnerable Software and Affected Versions: Huawei home routers affected versions not specified Description: A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause Denial of Service DoS or information leakage. Th...

PT-2024-40987 · Polkit · Polkit

Name of the Vulnerable Software and Affected Versions: polkit affected versions not specified Description: The issue concerns a problem with permissions for rules folders in polkit. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-23188 · Hcl · Hcl Connections

Name of the Vulnerable Software and Affected Versions: HCL Connections affected versions not specified Description: The issue is related to a broken access control mechanism, which may lead to the exposure of sensitive information to unauthorized users under certain conditions. Recommendations: A...

PT-2024-40697 · Apache · Apache Commons Configuration2

Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration2 affected versions not specified Description: The issue is related to a security exception in the org.apache.commons.configuration2 package. Specifically, the problem occurs in the...

PT-2024-14795 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue occurs when a server receives a malformed message that uses the hostname in an internal table, potentially causing a stack overflow and leading to possible remote code execution...

PT-2024-40986 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt and related containers affected versions not specified Description: The issue concerns the OrdinalPodInterfaceName mechanism, which has been improved. There is no information provided about the estimated number of potentially affecte...

PT-2024-3098 · Micrium · Micrium Os Network Http Server

Name of the Vulnerable Software and Affected Versions: Micrium OS Network HTTP Server affected versions not specified Description: A bug in the Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing, potentially allowing a device crash and Denial of Service...

PT-2024-25174 · Tibco · Tibco Jasperreports Server

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server affected versions not specified Description: The issue allows code execution to be exploited even without prior access to the system. Recommendations: At the moment, there is no information about a newer version tha...

PT-2024-3176 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to an integer overflow in the Microsoft ODBC Driver for SQL Server library. This allows a remote attacker to execute arbitrary code...

PT-2024-3002 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to a buffer overflow in the heap of the Windows Telephony Server, which can allow an attacker to elevate their privileges. This can affect the system,...