PT-2024-21000 · W&T +1 · Com Redirector Legacy +5

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product. Recommendations: At the moment, there is no information about a newe...

PT-2024-2150 · Hikvision · Hikcentral Professional

Name of the Vulnerable Software and Affected Versions: HikCentral Professional affected versions not specified Description: The issue is related to insufficient server-side validation, which could allow an attacker to gain access to certain URLs that they should not have access to. This is a...

PT-2024-18358 · Dassault Systèmes · Dassault Systèmes Edrawings

Name of the Vulnerable Software and Affected Versions: Dassault Systèmes eDrawings affected versions not specified Description: The issue allows remote code execution via various file parsing vulnerabilities, including heap-based buffer overflow, memory corruption, out-of-bounds read, out-of-boun...

PT-2024-21640 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate was withdrawn by its CNA due to being out of scope for their CVE ID assignments. Recommendations: At the moment, there is no information about a newer version tha...

PT-2024-15564 · Git +2 · Anything-Llm +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows an attacker, with permission to submit a link or submitting a link via POST to be collected that is using the file:// protocol, to introspect host files and other relative...

PT-2024-13942 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus affected versions not specified Description: A comprehensive exploration of the intricate vulnerabilities of ManageEngine ADAudit Plus has been conducted. Recommendations: At the moment, there is no information about...

PT-2024-1946 · Commend · Commend Ws203Vicm

Name of the Vulnerable Software and Affected Versions: Commend WS203VICM affected versions not specified Description: The issue is related to insufficient access control in the Commend WS203VICM IP station's firmware. A remote attacker may be able to bypass access control by creating a malicious...

PT-2024-14011 · Quic · Quic

Name of the Vulnerable Software and Affected Versions: QUIC in RFC 9000 affected versions not specified Description: The Latency Spin Bit specification in QUIC does not strictly constrain the bit value when the feature is disabled. This might allow remote attackers to construct a covert channel...

PT-2024-15077 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an unchecked length coming from user input in the settings shell. This could potentially lead to exploitation. No specific details about affected devices or...

PT-2024-14563 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue concerns a vulnerability of permission verification in the content sharing pop-up module. Successful exploitation of this issue may cause unauthorized file sharing...

PT-2024-12847 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the createFromParcel method of UsbConfiguration.java. This could lead to a background activity launch, resulting in local escalation of...

PT-2024-2258 · Unknown · Trace Mode 7

Name of the Vulnerable Software and Affected Versions: TRACE MODE 7 affected versions not specified Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue could allow an attacker to gain unauthorized access to protect...

PT-2024-15312 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue is related to a missing permission check in the applyCustomDescription function of SaveUi.java, allowing potential local information disclosure with user execution privileges...

PT-2024-19958 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: An SQL injection issue exists in an undisclosed page of the BIG-IP Configuration utility. The exact nature of the issue and its potential impact are not fully detailed, but it suggests a...

PT-2024-19163 · Apache +1 · Apache Tomcat +1

Name of the Vulnerable Software and Affected Versions: Apache Tomcat affected versions not specified Description: The issue is related to insecure permissions in the packaging of Apache Tomcat, allowing local users to escalate to root if they win a race during package installation. This is a loca...

PT-2024-1824

Name of the Vulnerable Software and Affected Versions Microsoft Defender for Endpoint affected versions not specified Description The issue is related to insufficient access control in Microsoft Defender for Endpoint, which can be exploited to elevate privileges. There is no information provided...

PT-2024-1650 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...

PT-2024-1867 · Microsoft · Entra Jira Single-Sign-On Plugin

Name of the Vulnerable Software and Affected Versions: Microsoft Entra Jira Single-Sign-On Plugin affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft Entra Jira Single-Sign-On Plugin, which can be exploited by a remote attacker to...

PT-2024-1649 · Microsoft · Dynamics 365 Sales

Name of the Vulnerable Software and Affected Versions: Dynamics 365 Sales affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Dynamics 365, which can lead to spoofing attacks. A remote attacker can...

PT-2024-1902 · Freeipa +7 · Freeipa +7

Name of the Vulnerable Software and Affected Versions: FreeIPA affected versions not specified Description: The issue is related to insufficient input validation in the ipautil.py script's run function on the FreeIPA server, specifically with the user parameter /sip/session/login password. This m...