PT-2024-25810 · Tracing +1 · Tracing +1

Name of the Vulnerable Software and Affected Versions: matrix-sdk-crypto version 0.7.0 matrix-sdk-crypto versions prior to 0.7.1 Description: The issue concerns a logic bug in the matrix-sdk-crypto crate, which is part of the Matrix Rust SDK project. This bug causes the private part of the backup...

PT-2024-6143 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint version 16.83 Description: A library injection issue exists, allowing a specially crafted library to leverage PowerPoint's access privileges and bypass permissions. This can be triggered by a malicious application injecti...

PT-2024-13799 · Nocodb · Nocodb

Name of the Vulnerable Software and Affected Versions: NocoDB versions prior to 0.202.9 Description: A stored cross-site scripting vulnerability exists within the Formula virtual cell comments functionality. The nc-gui/components/virtual-cell/Formula.vue displays a v-html tag with the value of ur...

PT-2024-32930 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A critical issue was found in the file view each faculty.php, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely. The issue has been...

OESA-2024-1570 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix scsimodesense buffer length handling Several problems exist with scsimodesense buffer length handling: 1 The allocation length field of the MODE...

PT-2024-19352 · Ibm · Ibm Txseries For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms version 8.2 Description: The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

PT-2024-4664

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 3.3 FIPS modules in 3.3, 3.2, 3.1, and 3.0 are not affected Description: The issue is related to the SSL free buffers function in OpenSSL, which can cause memory to be accessed after it has been freed in certain...

PT-2024-23618 · Unknown · Cloud Based Customer Service Management Platform

Name of the Vulnerable Software and Affected Versions: Cloud based customer service management platform version 1.0.0 Description: The issue allows a local attacker to execute arbitrary code via a crafted payload to the "Login.asp" component. This is related to a SQL Injection vulnerability...

PT-2024-25499 · Globitel · Globitel Ksa Speechlog

Name of the Vulnerable Software and Affected Versions: Globitel KSA SpeechLog version 8.1 Description: A stored cross-site scripting XSS issue was found in the Save Query function. Recommendations: For version 8.1, consider disabling the Save Query function until a patch is available to prevent...

GHSA-G49Q-JW42-6X85 thelounge may publicly disclose of all usernames/idents via port 113

Per RFC 1413, The unique identifying tuple includes not only the ports, but also the both addresses. Without the addresses, the information becomes both non-unique and public: - If multiple connections happen to use the same local port number which is possible if the addresses differ, the usernam...

PT-2024-3690 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: The issue is related to a vulnerability in the SetTelnetCfg function, which can be exploited by attackers to log in through telnet. This vulnerability exists due to insufficient input...

PT-2024-28069

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to the net/mlx5 component of the Linux kernel, where a timeout has been added to acquire the command queue semaphore. This change prevents forced completion handling on an...

PT-2024-3694 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: A stack buffer overflow issue was found in the setMacFilterRules function, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: For TOTOLINK CP450...

PT-2024-28070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 module. The issue occurs when the lag disable/enable function is called, causing the bond IB device an...

PT-2024-6208 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to the function H5E printf stack in the file H5Eint.c of the HDF5 Library, which is associated with uncontrolled recursion. This can lead to stack consumption. Exploitati...

PT-2024-40282 · Cidentd · Identd

Name of the Vulnerable Software and Affected Versions: identd affected versions not specified Description: The issue arises from the ident protocol as defined in RFC 1413, where the unique identifying tuple includes not only the ports but also both addresses. Without considering the addresses, th...

PT-2024-20985 · Ruvaroa · Ruvaroa

Name of the Vulnerable Software and Affected Versions: RuvarOA versions 6.01 through 12.01 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the sys file storage id parameter at the "/WorkPlan/WorkPlanAttachDownLoad.aspx" API endpoint...

PT-2024-25764 · Libmodbus · Libmodbus

Name of the Vulnerable Software and Affected Versions: libmodbus version 3.1.10 Description: The issue is a Buffer Overflow that can be triggered via the modbus write bits function when it is fed with specially crafted input. This leads to out-of-bounds read and can potentially cause a crash or...

PT-2024-19934 · Hcl · Hcl Bigfix Compliance

Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance versions 9.x through 11.x Description: Database scanning using a username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant securit...

PT-2024-18767 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR May-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the startListening function of the CocktailBarService. This vulnerability allows local attackers to...