PT-2024-2520 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: The issue is related to a memory buffer vulnerability that could allow a threat actor to read beyond the intended memory boundaries. This could reveal sensitive...

PT-2024-8417 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the Linux kernel's vcodec component. This can occur when the ctx list is accessed within the vpu enc ipi handler function after it...

PT-2024-11213 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the corruption of the pg bytes written value in the nfs do recoalesce function. The value of mirror-pg bytes written should only be updated after a successful attemp...

PT-2024-40669 · Antlr4 · Antlr4

Name of the Vulnerable Software and Affected Versions: antlr4 affected versions not specified Description: The issue is related to a security exception in the antlr4 library. The crash occurs in the fromRuleContext function of the PredictionContext class and involves the update function of the...

PT-2024-20105

Name of the Vulnerable Software and Affected Versions vantage6 affected versions not specified Description The vantage6 server has no restrictions on CORS settings, which should be configurable to set allowed origins. The impact is limited because v6 does not use session cookies. Recommendations ...

PT-2024-15462 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-18467 · Quarkus · Quarkus

Name of the Vulnerable Software and Affected Versions: Quarkus affected versions not specified Description: A vulnerability was found in Quarkus where, under certain conditions related to the Continuous Integration CI process, git credentials could be inadvertently published. This could put the g...

PT-2024-2278 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for Android affected versions not specified Description: The issue is related to an information disclosure vulnerability. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected...

PT-2024-2078 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows kernel, allowing an attacker to bypass security restrictions and elevate their privileges. This can affect the system,...

PT-2024-2298 · Microsoft · Authenticator

Name of the Vulnerable Software and Affected Versions: Microsoft Authenticator affected versions not specified Description: The issue is related to insufficient access controls in the Microsoft Authenticator application, which can be exploited to elevate privileges. Recommendations: At the moment...

PT-2024-2039 · Schneider Electric · Schneider Electric Easergy T200

Name of the Vulnerable Software and Affected Versions: Schneider Electric Easergy T200 affected versions not specified Description: A Files or Directories Accessible to External Parties issue exists, potentially allowing unauthenticated files and logs exfiltration and download of files when an...

PT-2024-2191 · Microsoft · Azure Data Studio

Name of the Vulnerable Software and Affected Versions: Azure Data Studio affected versions not specified Description: The issue is related to insufficient access control in Azure Data Studio, which can be exploited to elevate privileges. Recommendations: At the moment, there is no information abo...

PT-2024-21263 · Google · Android

Name of the Vulnerable Software and Affected Versions: SAEMM RadioMessageCodec.c affected versions not specified Description: The issue is related to a possible out of bounds read in the SAEMM DiscloseGuti function of SAEMM RadioMessageCodec.c due to a missing bounds check. This could lead to...

PT-2024-14108 · Silicon · Z-Wave

Name of the Vulnerable Software and Affected Versions: Silicon Labs Z-Wave affected versions not specified Description: The issue may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. Recommendations: At the moment, there is no...

PT-2024-2338 · Nessus · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus affected versions not specified Description: The issue is related to a vulnerability in a Nessus plugin, which could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem locati...

PT-2024-12398 · Fastrpc · Fastrpc

Name of the Vulnerable Software and Affected Versions: FastRPC affected versions not specified Description: The issue is related to Information Disclosure while processing IOCTL request in FastRPC. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

PT-2024-13120 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption that occurs when invoking IOCTLs calls in Automotive Multimedia. Recommendations: At the moment, there is no information about a newe...

PT-2024-2942 · Unknown +5 · Xorg-Server +5

Name of the Vulnerable Software and Affected Versions: Xorg-server affected versions not specified Description: A heap-based buffer over-read issue was found in the X.org server's ProcAppleDRICreatePixmap function. This occurs when byte-swapped length values are used in replies, potentially leadi...

PT-2024-18516 · Mediatek +1 · Mt6739 +1

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to improper input validation, which could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation...

PT-2024-19897 · Ws203Vicm · Ws203Vicm

Name of the Vulnerable Software and Affected Versions: WS203VICM affected versions not specified Description: A weak encoding is used to transmit credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...