PT-2024-1078 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge, which can be exploited by an attacker to elevate their privileges using a specially crafted file...

PT-2024-14356 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that occurs in the getIptvInfo function. This overflow is triggered via the adv.iptv.stbpvid parameter. Recommendations: For Tenda AX1803 version 1.0.0.1,...

PT-2024-1151 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to insufficient access control mechanisms in Windows Cryptographic Services, which can be exploited to disclose protected information. There is n...

PT-2024-1105 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to an integer overflow in the Windows Cloud Files mini-filter driver, which can allow an attacker to elevate their privileges t...

PT-2024-1588 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI's SPx, where an attacker may cause an untrusted pointer to dereference via a local network. This could lead to a loss of...

PT-2024-1017 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to insufficient input validation in the Cryptographic Services of Windows operating systems. This can allow an attacker to execute arbitrary code...

PT-2024-1082 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Visual Studio, which could allow an attacker to gain elevated privileges on affected systems. The...

PT-2024-13279 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The HCL DRYiCE MyXalytics product is impacted by an unauthenticated file upload issue. The web application allows the upload of a certain file without requiring user...

PT-2024-13277 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to a path traversal arbitrary file read vulnerability. It occurs because the product uses external input to construct a pathname intended to identify a fi...

PT-2024-13912 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to an Insecure Direct Object Reference IDOR vulnerability, which allows a user to obtain certain details about another user due to improper access control...

PT-2024-12969 · Zte · Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZXCLOUD iRAI affected versions not specified Description: There is an illegal memory access issue in ZTE's ZXCLOUD iRAI product. When exploited by an attacker with common user permission, the physical machine will crash. Recommendations: At t...

PT-2023-29654 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further...

PT-2023-18946 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations: At the moment, there is no informati...

PT-2023-18940 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. There is no information...

PT-2023-18934

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations At the moment, there is no information...

PT-2023-29469 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A vulnerability has been identified, but details are not provided. It is recommended to consult the provided links for more information. No...

PT-2023-35669 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello function, specifically in the process tls and fuz...

PT-2023-31347 · Unknown · Sayfa Sayac

Name of the Vulnerable Software and Affected Versions: Sayfa Sayac versions through 2.6 Description: The issue is related to Deserialization of Untrusted Data, which affects the specified versions of Sayfa Sayac. Recommendations: For versions through 2.6, at the moment, there is no information...

PT-2023-31576 · Unknown · Nos Client

Name of the Vulnerable Software and Affected Versions: nos client version 0.6.6 Description: An issue was discovered in the nos client, allowing remote attackers to escalate privileges via the getRPCEndpoint.js file. Recommendations: For nos client version 0.6.6, consider disabling the...

PT-2023-31496 · Trimble · Trimble Sketchup Viewer

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this issue, where...