PT-2024-14310 · Ylianst · Ylianst Meshcentral

Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: The issue is related to the use of a broken or risky cryptographic algorithm. Recommendations: For Ylianst MeshCentral version 1.1.16, at the moment, there is no information about a newer versio...

PT-2024-12632 · Hcl · Hcl Bigfix Platform

Name of the Vulnerable Software and Affected Versions: HCL BigFix Platform affected versions not specified Description: A cross-site scripting XSS vulnerability in the Web Reports component can possibly allow an attack to exploit an application parameter during execution of the Save Report...

PT-2024-20259 · Unknown · Springboot-Manager

Name of the Vulnerable Software and Affected Versions: springboot-manager version 1.6 Description: The issue is related to Cross Site Scripting XSS via the "/sys/user" API endpoint. This allows for potential malicious script execution. The estimated number of potentially affected devices worldwid...

PT-2024-15920 · Dassault Systèmes · Delmia Apriso

Name of the Vulnerable Software and Affected Versions: DELMIA Apriso versions Release 2019 through Release 2024 Description: An issue is affecting the software where sensitive information is inserted into log files. Recommendations: For DELMIA Apriso versions Release 2019 through Release 2024, at...

PT-2024-19318 · Codeboxr · Codeboxr Cbx Map

Name of the Vulnerable Software and Affected Versions: Codeboxr CBX Map for Google Map & OpenStreetMap versions 1.1.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This...

PT-2024-14064 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 Foxy Fitzroy Description: An issue was discovered in shell command execution in ROS2, allowing an attacker to run arbitrary commands and cause other impacts. The issue is related to the ROS VERSION=2 and ROS PYTH...

PT-2024-14311 · Devicefarmer · Devicefarmer Stf

Name of the Vulnerable Software and Affected Versions: DeviceFarmer stf version 3.6.6 Description: The issue is related to the use of a broken or risky cryptographic algorithm. Recommendations: For DeviceFarmer stf version 3.6.6, at the moment, there is no information about a newer version that...

PT-2024-13323 · Minizinc · Minizinc

Name of the Vulnerable Software and Affected Versions: MiniZinc affected versions not specified Description: The issue is related to a null pointer dereference in MiniZinc, which can be triggered via a crafted Preferences.json file. Recommendations: At the moment, there is no information about a...

PT-2024-1433 · Unknown · Machinesense

Name of the Vulnerable Software and Affected Versions: MachineSense affected versions not specified Description: The MachineSense application programmable interface API is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive...

PT-2024-19982 · Motorola · Motorola Mr2600

Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: An authentication bypass issue exists in the web component, allowing an attacker to access protected URLs and retrieve sensitive information. Recommendations: At the moment, there i...

PT-2024-19977 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: A buffer overflow exists in the license server of IBM Merge Healthcare eFilm Workstation. This issue can be exploited by a remote, unauthenticated attacker to...

PT-2024-14318 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This can be exploited by sending a specifically designed request to the affected...

PT-2024-15776 · Byzoro · Byzoro Smart S150 Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S150 Management Platform version V31R02B15 Description: A vulnerability has been found in the Byzoro Smart S150 Management Platform, affecting an unknown part of the file /log/download.php of the component Backup File Handler. Th...

PT-2024-13593 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a video decoder, where improper input validation leads to a possible out of bounds write. This could result in a local denial of...

PT-2024-11966 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules. No further details are provided about the nature of the issu...

PT-2024-14400 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A buffer overflow vulnerability exists in the FLP module. Successful exploitation of this issue may cause an out-of-bounds read. Recommendations: At the...

PT-2024-13268 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inaccurate trust relationships in distributed scenarios, which could impact service confidentiality upon successful exploitation. Recommendations: At the moment,...

PT-2024-11968 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability has been reported, but details are not provided due to compliance with CNA rules. It is advised not to wait for vulnerability scanning results. Recommendations: At the...

PT-2024-13716 · Hongdian · H8951-4G-Esp +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The authentication cookies are generated using an algorithm based on the username, a hardcoded secret, and the up-time, and can be guessed in a reasonab...

PT-2024-40872 · Git +1 · Icu

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash state involves several functions, including canonicalize, ulocimp getBaseName 75, a...