PT-2024-29195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the KVM Kernel-based Virtual Machine on arm64 architecture, where a dangling pointer to a redistributor region could be stored in a vcpu when tearing down the...

PT-2024-40511 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Software affected versions not specified Description: A security issue allows backend users without read access to specific pages to still view them in the page tree, which should be disallowed...

PT-2024-40424 · Stormpath · Stormpath-Sdk-Php

Name of the Vulnerable Software and Affected Versions: stormpath-sdk-php affected versions not specified Description: The issue is related to the use of an insecure random number generator RNG in the generation of UUID version 4 within the codebase. Recommendations: At the moment, there is no...

PT-2024-12230 · H3C · H3C Magic R100 +1

Name of the Vulnerable Software and Affected Versions: H3C Magic R365 affected versions not specified H3C Magic R100 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: For H3C...

PT-2024-21283 · Unknown · Substation Server

Name of the Vulnerable Software and Affected Versions: Substation Server affected versions not specified Description: The issue concerns vulnerabilities in third-party components used in Substation Server. No specific details about the nature of the vulnerabilities, affected devices, or real-worl...

PT-2024-3975 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to the UpLoadServlet component of the NETGEAR ProSAFE Network Management System, which is vulnerable to directory traversal and remote...

PT-2024-12233 · 360 · 360 T6M +3

Name of the Vulnerable Software and Affected Versions: 360 V6G affected versions not specified 360 T5G affected versions not specified 360 T6M affected versions not specified 360 P1 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, which...

PT-2024-40255 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No vulnerable software versions are specified. Description: The issue concerns the internal salt used for password hashing not being updated when a user changes their password. This behavior has been improved to reset the salt upon password...

PT-2024-40391 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue arises after a password reset, where the ChangePasswordForm::doChangePassword function logs in the user without checking Member::canLogIn. This...

PT-2024-30854 · Jenkins +1 · Cas +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a lack of validation for a parameter before making a request to it. This could allow unauthenticated users to perform a Server-Side Request Forgery SSRF attack. SSR...

PT-2024-40435 · Packagist · Passbolt/Passbolt Api

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information is not available. Description: A user could create and share a resource with a malicious URI. When the victim opens the URI in a new tab using the "Open URI in a new tab"...

PT-2024-26263 · Quanxun Huiju Network Technology · Ik-Q3000

Name of the Vulnerable Software and Affected Versions: Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 version 3.7.10 Description: The issue concerns an ICMP redirect attack. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2024-26244 · Kykms · Kykms

Name of the Vulnerable Software and Affected Versions: KYKMS versions 1.0.1 and below Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file. This is due to an arbitrary file upload vulnerability. Recommendations: For KYKMS versions 1.0.1 and below, at...

PT-2024-40038 · Unknown · Alterphp/Easyadmin-Extension-Bundle

Name of the Vulnerable Software and Affected Versions: alterphp/easyadmin-extension-bundle affected versions not specified Description: The issue concerns role-based access rules not handling action name case sensitivity, potentially leading to unauthorized access. Recommendations: At the moment,...

PT-2024-4720 · Microsoft · Net Core

Name of the Vulnerable Software and Affected Versions: .NET Core versions affected versions not specified Description: The issue is related to an incorrect restriction of directory path names in the .NET Core software component "Сервис обновлений". This could allow a remote attacker to gain read...

PT-2024-40777 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr and...

PT-2024-3590 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an incorrect handling of symbolic links before accessing a file, which can be exploited to elevate privileges. This can allow an attacker to affect the system...

PT-2024-25048 · Sap · Sap Bank Account Management

Name of the Vulnerable Software and Affected Versions: SAP Bank Account Management affected versions not specified Description: The issue results from a lack of necessary authorization checks for authorized users, leading to an escalation of privileges. This has a low impact on the system's...

PT-2024-33096 · Red Hat · Openstack Platform Director

Name of the Vulnerable Software and Affected Versions: OpenStack Platform RHOSP director affected versions not specified Description: A flaw in the OpenStack Platform director allows plaintext passwords to be stored in log files. This can expose sensitive information to anyone with access to the...

PT-2024-26346 · Gutenify · Gutenify

Name of the Vulnerable Software and Affected Versions: Gutenify versions 1.4.0 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. Recommendations: For versions 1.4.0 and earlier, update to a version that contains a fix for this issue,...