PT-2024-40965 · Unknown · Gtk-Layer-Shell

Name of the Vulnerable Software and Affected Versions: gtk-layer-shell versions affected versions not specified Description: The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that th...

PT-2024-13647 · Ideapush · Ideapush

Name of the Vulnerable Software and Affected Versions: IdeaPush affected versions not specified Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: At the moment, there...

PT-2025-16241

Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in libsoup, where the soup message headers get content disposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a...

PT-2024-35912 · Unknown · Floristpress

Name of the Vulnerable Software and Affected Versions: FloristPress versions n/a through 7.3.0 Description: The issue is related to a Missing Authorization vulnerability in FloristPress. Recommendations: For versions n/a through 7.3.0, update to a version that contains a fix for this issue,...

PT-2024-13479 · Unknown · Welcome Email Editor

Name of the Vulnerable Software and Affected Versions: Welcome Email Editor versions through 5.0.6 Description: The issue is related to a Missing Authorization vulnerability in the Welcome Email Editor, which allows exploiting incorrectly configured access control security levels. Recommendations...

PT-2025-3119

Name of the Vulnerable Software and Affected Versions Umbraco CMS version 14.3.1 Description A stored cross-site scripting XSS vulnerability in Umbraco CMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This issue is only possible via authenticated users who have...

PT-2024-16531 · Sick Ag +1 · Sick Inspectorp61X +4

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: The product is vulnerable to remote code execution due to missing input validation during one step of the firmware update process. An attacker with network access and the user level "Servic...

PT-2024-17425 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was initially reported but later rejected as a candidate, and its usage was prevented. No further details are available about the natu...

PT-2024-10289 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Edge, which is based on Chromium. This vulnerability can be exploited by a remote attacker...

PT-2024-10138 · Drupal · Megamenu Framework

Name of the Vulnerable Software and Affected Versions: Megamenu Framework versions . Description: The issue is related to insufficient input validation in the Megamenu Framework module of the Drupal CMS, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: For...

PT-2024-10679 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible memory corruption in the sg remove scat function of scsi/sg.c. This corruption could lead to a local escalation of privilege, requiring System...

PT-2024-10668 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a buffer overwrite in multiple functions of gl proc.c due to a missing bounds check. This could potentially lead to escalation o...

PT-2024-11639 · Apache · Apache Hive Metastore

Name of the Vulnerable Software and Affected Versions: Apache Hive Metastore HMS affected versions not specified Description: The issue concerns the use of the SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions, which is unsafe and can lead to...

PT-2024-33117 · Inovance · Inovance Am401 Cpu1608Tptn

Name of the Vulnerable Software and Affected Versions: INOVANCE AM401 CPU1608TPTN affected versions not specified Description: An issue in INOVANCE AM401 CPU1608TPTN allows a remote attacker to execute arbitrary code via the ExecuteUserProgramUpgrade function. Recommendations: At the moment, ther...

PT-2024-30641 · Skia · Skia

Name of the Vulnerable Software and Affected Versions: Skia affected versions not specified Description: The issue is related to a possible out of bounds write due to an integer overflow in the skia alloc func of SkDefale.cpp. This could lead to local escalation of privilege with no additional...

PT-2024-15254 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is marked as a duplicate and is no longer used. No further details are provided about the nature of the issue or its potential impact...

PT-2024-39481 · Zyxel · Zyxel Vmg3625-T50B

Name of the Vulnerable Software and Affected Versions: Zyxel VMG3625-T50B firmware versions through V5.50ABPM.9.2C0 Description: A post-authentication buffer overflow vulnerability in the action parameter of the CGI program could allow an authenticated attacker with administrator privileges to...

PT-2024-18616 · Mediatek · Mediatek Mt8796 Power

Name of the Vulnerable Software and Affected Versions: MediaTek MT8796 Power component affected versions not specified Description: A possible out of bounds write due to a missing bounds check could lead to local escalation of privilege with System execution privileges needed. No user interaction...

PT-2024-25084 · Pal · Pal

Name of the Vulnerable Software and Affected Versions: PAL affected versions not specified Description: The issue occurs when the PAL client calls PAL service APIs by passing a random value as a handle, and the handle is not validated by the service, resulting in memory corruption. Recommendation...

PT-2024-18618 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a possible out of bounds write due to a mission bounds check in Modem. This could lead to local escalation of privilege with no additional execution privileges needed...