PT-2024-16901 · Trcore · Dvc

Name of the Vulnerable Software and Affected Versions: DVC from TRCore affected versions not specified Description: The issue allows unauthenticated remote attackers to exploit a Path Traversal vulnerability, enabling them to read arbitrary system files. Recommendations: At the moment, there is n...

PT-2024-35400

Name of the Vulnerable Software and Affected Versions Avahi-daemon affected versions not specified Description A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. Recommendations ...

PT-2024-16852 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical issue affects some unknown functionality of the file /admin/ad list.php?action=pass of the component Keyword Filtering. The manipulation of the keyword argument leads to SQL injection. The attack may...

PT-2024-10297 · Planet Technology · Planet Switches

Name of the Vulnerable Software and Affected Versions: Planet Switches affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements in the firmware of PLANET Technology switches. An unauthenticated attacker could send commands through a...

PT-2024-35401

Name of the Vulnerable Software and Affected Versions Avahi-daemon affected versions not specified Description A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior...

PT-2024-32891 · Unknown · Boa Web Server

Name of the Vulnerable Software and Affected Versions: Boa web server affected versions not specified Description: The issue is related to a path traversal vulnerability, which is a type of security weakness that allows an attacker to access files or directories outside the intended directory...

PT-2025-14760

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in libsoup, where a vulnerability in the sniff feed or html and skip insignificant space functions may lead to a heap buffer over-read. Recommendations At the moment, there i...

PT-2024-16242 · Openafs +1 · Openafs +1

Name of the Vulnerable Software and Affected Versions: OpenAFS affected versions not specified Description: A local user can bypass the OpenAFS PAG Process Authentication Group throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining...

PT-2024-34436 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was discovered in the /admin/department.php file. This allows remote attackers to execute arbitrary scripts via the d and pi...

PT-2024-16244 · Openafs +1 · Openafs +1

Name of the Vulnerable Software and Affected Versions: OpenAFS affected versions not specified Description: A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code. Recommendations: At the moment, there is no information about a newer...

Fedora 37 : rubygem-nokogiri (2022-b5c325caad)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b5c325caad advisory. A potential bug was found on nokogiri on or before 1.13.9 overlooked some return values from functions used internally. This can lead to raise some illegal...

PT-2024-34474 · Unknown · Ferozo Webmail

Name of the Vulnerable Software and Affected Versions: Ferozo Webmail version 1.1 Description: A critical issue has been identified in Ferozo Webmail, where the MX server disregards configuration settings. Recommendations: For Ferozo Webmail version 1.1, at the moment, there is no information abo...

PT-2024-41143 · 7 Zip · 7-Zip

Name of the Vulnerable Software and Affected Versions: 7-Zip affected versions not specified Description: The issue is related to a flaw in the Mark-of-the-Web protection mechanism of 7-Zip, which can lead to data protection violations. Exploitation of this issue may allow an attacker to execute...

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2023-3817]

Summary Redhat provided OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-3817 Vulnerability Details CVEID:CVE-2023-3817 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw when using the DHcheck,...

PT-2024-8847 · Intel · Intel Server Board S2600St Family Bios/Firmware Update

Name of the Vulnerable Software and Affected Versions: IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to improper input validation in the BIOS and firmware update software, which may allow a privileged user to potentially enable...

PT-2024-8153 · Microsoft · Windows Usb Video Class Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Video Class Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling the attacker...

PT-2025-11340

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.05.0 Ghostscript affected versions not specified Description A buffer overflow issue exists in Ghostscript when converting glyphs to Unicode within the psi/zbfont.c file. This can potentially lead to...

PT-2025-11337 · Unknown +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns a compression buffer overflow in NPDL devices and package vulnerabilities related to ghostscript in Debian Linux. Recommendations: At the moment, there is no...

PT-2024-19122 · Amd · Amd Cloud Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Cloud Manageability Service ACMS Software affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Cloud Manageability Service ACMS Software. This could...

PT-2024-39792 · Trimble · Trimble Sketchup Viewer

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this, where the...