PT-2024-10078 · Drupal · Drupal Git Utilities

Name of the Vulnerable Software and Affected Versions: Drupal Git Utilities for Drupal versions . Description: The issue is related to insufficient protection of service data in the Git Utilities module for the Drupal CMS, which can be exploited by a remote attacker to gain read, modify, or delet...

PT-2024-9424 · Microsoft · Access +1

Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to a memory use after free vulnerability in Microsoft Access, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicio...

PT-2024-9428 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can potentially allow an attacker to gain higher privileges on the system...

PT-2024-9458 · Intel · Intel Nuc Software Studio Service

Name of the Vulnerable Software and Affected Versions: Intel NUC Software Studio Service affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to cause a denial of service. Recommendations: At the moment, there is no information...

PT-2024-9371 · Microsoft · Windows Wireless Wide Area Network Service +1

Name of the Vulnerable Software and Affected Versions: Windows Wireless Wide Area Network Service WwanSvc affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information. This can le...

PT-2024-12236 · Sparkle Themes · Sparkle Themes Blogger Buzz

Name of the Vulnerable Software and Affected Versions: Sparkle Themes Blogger Buzz versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Sparkle...

PT-2024-41036 · Stalker · Communigate Pro

Name of the Vulnerable Software and Affected Versions: CommuniGate Pro affected versions not specified Description: The issue is related to a buffer overflow on the stack in the CommuniGate Pro mail server. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

PT-2024-17439 · Apache · Apache Sdr

Name of the Vulnerable Software and Affected Versions: Apache SDR affected versions not specified Description: The issue concerns an authentication bypass. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about ...

PT-2024-29559 · Ibm · Ibm Cognos Controller

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For...

PT-2024-10653 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to improper input validation in the l2c lcc proc pdu function of l2c fcr.cc. This could lead ...

PT-2024-10654 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible information disclosure due to uninitialized data in the gatts process read by type req function of gatt sr.c. This could lead to remote information...

PT-2024-31820 · Lakefs · Lakefs

Name of the Vulnerable Software and Affected Versions: lakeFS affected versions not specified Description: The issue is related to privilege escalation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-16714 · Sma · Sunny Central Sc 1760-Us +28

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected product's administration panel to gain read and...

PT-2024-24447 · Sharp +1 · Multiple Mfps

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves user passwords being decrypted and stored in memory before any user logs in. These decrypted passwords can be retrieved from the...

PT-2024-37845 · Axis · Axis Camera Station Pro

Name of the Vulnerable Software and Affected Versions: AXIS Camera Station affected versions not specified Description: The Incident report feature in the AXIS Camera Station windows client may expose sensitive credentials. This issue only applies if the Incident report is being used with...

PT-2024-10569 · Xbl Sec · Xbl Sec

Name of the Vulnerable Software and Affected Versions: xbl sec affected versions not specified Description: The initial revision of xbl sec lacks certain debug policy features and critical checks. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

PT-2024-40636 · Git +1 · Checker-Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories function, as part...

PT-2024-10609 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows certain unprivileged processes to perform IOCTL calls. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-16744 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a rejected CVE candidate due to an error, with all references and descriptions...

PT-2024-34785 · Unknown · Advanced Pdf Generator

Name of the Vulnerable Software and Affected Versions: Advanced PDF Generator versions 0.4.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...