PT-2024-3939 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to an incorrect reference count before accessing a file, which can be exploited to elevate privileges using a specially crafted link. Recommendations: At th...

PT-2024-40986 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt and related containers affected versions not specified Description: The issue concerns the OrdinalPodInterfaceName mechanism, which has been improved. There is no information provided about the estimated number of potentially affecte...

PT-2024-19939 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue arises from the failure of HCL DevOps Deploy / HCL Launch to invalidate a user's session after they log out. This could potentially allow an authenticated...

PT-2024-19942 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to a sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values. Recommendations: At the moment, there is...

PT-2024-4760 · Энтек · Энтек

Name of the Vulnerable Software and Affected Versions: ЭНТЕК affected versions not specified Description: The issue is related to insufficient restriction of authentication attempts in the SCADA system. This can be exploited by a remote attacker to perform a brute force attack. Recommendations: A...

PT-2024-12304 · Amc2-2Wcf +1 · Amc2-2Wcf +1

Name of the Vulnerable Software and Affected Versions: AMC2-4WCF and AMC2-2WCF affected versions not specified Description: The issue is related to a firmware bug that may cause misinterpretation of data, allowing an adversary to grant access to the last authorized user. Recommendations: At the...

PT-2024-2786 · Unknown +6 · Libarchive +6

Name of the Vulnerable Software and Affected Versions: libarchive affected versions not specified Description: The vulnerability is related to a heap-based buffer overflow in the libarchive library, which can allow remote attackers to execute arbitrary code. This issue is associated with a buffer...

PT-2024-2890 · Microsoft · Azure Compute Gallery

Name of the Vulnerable Software and Affected Versions: Azure Compute Gallery affected versions not specified Description: The issue is related to inadequate access control in the Azure Compute Gallery, which is a tool for creating and managing virtual machine VM and container images. This can be...

PT-2024-3581 · Lenovo · Thinkagile +3

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem, ThinkAgile, NeXtScale, and Lenovo CP-CB-10 affected versions not specified SMM/SMM2 and FPC affected versions not specified Description: A command injection issue was identified in the System Management Module SMM/SMM2 and...

PT-2024-40689 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash occurred in the ndpi detection process packet function, which is located in the fuzz process...

PT-2024-23344 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns insufficient permission verification in the app management module. Successful exploitation of this issue will affect availability...

PT-2024-40685 · Git +1 · Openh264

Name of the Vulnerable Software and Affected Versions: Open-source software affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the WelsDec::CWelsDecoder class, specifically in the ReorderPicturesInDisplay,...

PT-2024-21485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the interconnect component in the Linux kernel, specifically the sc8180x driver. The CO0 BCM needs to be kept alive at all times to prevent hardware like the UFS...

PT-2024-18878 · Qualcomm · Snapdragon +26

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs when decoding a message of a size that exceeds the available system memory...

PT-2024-23790 · Heartthis · Heartthis

Name of the Vulnerable Software and Affected Versions: HeartThis versions 0.1.0 and earlier Description: The issue is related to Contributor Cross Site Scripting XSS in the software. Recommendations: For HeartThis versions 0.1.0 and earlier, at the moment, there is no information about a newer...

PT-2024-40906 · Unknown · Catppuccin

Name of the Vulnerable Software and Affected Versions: Catppuccin affected versions not specified Description: The issue concerns a deprecated tool, with users recommended to use Catppuccin's new tool, whiskers, instead. Recommendations: At the moment, there is no information about a newer versio...

PT-2024-40681 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, specifically a READ 8 crash type. The crash occurs in the dropNode function, within the api.c file,...

PT-2024-29736 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a NULL pointer check in the Linux kernel's drm/xe/xe devcoredump module. Specifically, it involves checking if 'coredump' is not NULL before assigning 'xe devcoredum...

PT-2024-23324 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

PT-2024-3766 · Grafana +6 · Grafana +6

Name of the Vulnerable Software and Affected Versions: Grafana versions 9.5.0 through 9.5.17 Grafana versions 10.0.0 through 10.0.12 Grafana versions 10.1.0 through 10.1.8 Grafana versions 10.2.0 through 10.2.5 Grafana versions 10.3.0 through 10.3.4 Description: The issue is related to a Broken...