PT-2024-35064 · Azonbox · Azonbox

Name of the Vulnerable Software and Affected Versions: AzonBox versions 1.1.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into t...

PT-2024-33322 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is being actively exploited. No further details are available about the nature of the issue or its potential impact. Recommendations: ...

PT-2024-35037 · Unknown · Rsv Pdf Preview

Name of the Vulnerable Software and Affected Versions: RSV PDF Preview versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For RSV PDF...

PT-2024-28235

Name of the Vulnerable Software and Affected Versions Spring MVC affected versions not specified Description The issue concerns Spring MVC controller methods that utilize an @RequestBody byte method parameter, making them susceptible to Denial of Service DoS attacks. Recommendations At the moment...

PT-2024-32889 · Vaemendis · Vaemendis

Name of the Vulnerable Software and Affected Versions: VaeMendis affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: At the...

PT-2024-30281 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code of the installExistingPackageAsUser method could lead to a carrier restriction bypass, resulting in local escalation of privilege with no additional execution...

PT-2024-9041 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Word, which can be exploited by a remote attacker to bypass security features, potentially allowing them to disable...

PT-2024-8599 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Native Client component of Microsoft SQL Server. This could allow a remote attacker to...

PT-2024-40460 · Crates.Io · Cggmp21

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns challenge derivation in non-interactive Zero-Knowledge ZK proofs, which was ambiguous and could potentially lead to a security issue. However, it is unknown if this...

PT-2024-8568 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Microsoft SQL Server Native Client component. This can allow a remote attacker to execute...

PT-2024-39989 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns an input validation bypass. However, it has been stated that the vulnerability has no impact and has been deprecated. No further details are provided about...

PT-2024-34710 · Unknown +1 · Nvme Driver +1

Name of the Vulnerable Software and Affected Versions: NVMe driver affected versions not specified Description: The NVMe driver queue processing is vulnerable to guest-induced infinite loops. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

PT-2024-8557 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Native Client component of Microsoft SQL Server. This could allow a remote attacker to...

PT-2024-9224 · Microsoft · Office 365 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Office 365 affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This can allow an attacker to run...

PT-2024-8093

Name of the Vulnerable Software and Affected Versions: TorchGeo affected versions not specified Description: The issue is related to incorrect code generation management in the TorchGeo library, which handles geospatial data. This can allow a remote attacker to execute arbitrary code...

PT-2024-39906 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A code execution issue has been discovered, allowing unauthenticated access. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-34907 · Unknown · Firework Shoppable Live Video

Name of the Vulnerable Software and Affected Versions: Firework Shoppable Live Video versions n/a through 6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-34673 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an out-of-bounds access vulnerability in the logo module. Successful exploitation of this vulnerability may affect service...

PT-2024-34675 · Wantagent · Wantagent

Name of the Vulnerable Software and Affected Versions: WantAgent module affected versions not specified Description: The issue is related to the WantAgent module, where the parameter type is not being verified. This could potentially affect availability if the vulnerability is successfully...

PT-2024-34810 · Noor Alam · Magical Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Magical Addons For Elementor versions 1.2.1 and earlier Description: A Server-Side Request Forgery SSRF vulnerability is present in Noor alam Magical Addons For Elementor, allowing Server Side Request Forgery. Recommendations: For versions...