PT-2024-10801 · Useragent · Useragent

Name of the Vulnerable Software and Affected Versions: Useragent versions prior to a fixed version no fixed version specified Description: The issue concerns a Regular Expression Denial of Service ReDoS vulnerability in the Useragent user agent parser for Node.js. This vulnerability affects all...

CVE-2024-21096 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21096 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable by disclosing private IP addresses

Summary IBM Sterling Connect:Direct Web Services could disclose sensitive IP address information to authenticated users in responses that could be used in further attacks against the system. Vulnerability Details CVEID:CVE-2024-45653 DESCRIPTION: IBM Sterling Connect:Direct Web Services could...

PT-2024-32620 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to the improper processing of HTTP authentication requests by Sharp and Toshiba Tec MFPs, resulting in an authentication bypass. Recommendations: At...

PT-2024-32352 · Virtio · Virtio

Name of the Vulnerable Software and Affected Versions: Virtio affected versions not specified Description: The issue is related to an integer overflow in the vring size of virtio ring.h, which could lead to a possible out of bounds write. This may result in local escalation of privilege without...

PT-2024-33119 · Ax2 Pro · Ax2 Pro

Name of the Vulnerable Software and Affected Versions: AX2 Pro home router version DI 7003G-19.12.24A1V16.03.29.50 Description: A command execution issue exists, allowing an attacker to construct a malicious payload and execute commands. This can lead to obtaining shell access to the router's fil...

PT-2024-33105 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A segmentation fault was detected in the Assimp::SplitLargeMeshesProcess Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs...

PT-2024-38756 · Nikon · Nikon Nef Codec

Name of the Vulnerable Software and Affected Versions: Nikon NEF Codec affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this issue, where the target must...

PT-2024-16212 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin-dashboard, leading to improper access controls. This issue can be exploited remotely...

PT-2024-7467 · Cisco · Cisco Secure Firewall Management Center (Fmc)

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Management Center FMC Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remo...

PT-2024-7503 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the VPN web server of the software could allow an...

PT-2024-9144 · Cisco · Snort

Name of the Vulnerable Software and Affected Versions: Cisco products affected versions not specified Description: The issue is related to an incorrect connection count comparison in the rate filtering feature of the Snort detection engine. This could allow an unauthenticated, remote attacker to...

PT-2024-7973 · Nvidia · Nvidia Virtual Gpu Manager

Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU Manager affected versions not specified Description: The issue is related to incorrect permission assignment for a critical resource in the NVIDIA Virtual GPU Manager component. This could allow an attacker to gain...

PT-2024-32492 · Dell · Dell Powerflex Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager affected versions not specified Description: A security issue has been identified in Dell PowerFlex Manager, where sensitive information is stored in cleartext. Recommendations: At the moment, there is no information...

PT-2024-10337 · Unknown · Gpt Academic

Name of the Vulnerable Software and Affected Versions: GPT Academic affected versions not specified Description: The issue is related to insufficient validation of incoming requests in the data loading function from the arxiv archive of the GPT Academic machine learning application. This can allo...

PT-2024-33945

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel has a weakness related to transient execution in Linear Address Masking LAM as described in the SLAM paper. This weakness may be exploitable unless Linear Address Spac...

PT-2024-10027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition between the laundromat handling of revoked delegations and a client sending a free stateid operation in the Linux kernel's NFS server. This can...

PT-2024-33508 · Elvaco · M-Bus Metering Gateway Cme3100 +1

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: The issue concerns unrestricted file uploads, which may allow an attacker to remotely execute code. This can potentially lead to an attacker running code from a remote location...

PT-2024-33506 · Elvaco · Elvaco

Name of the Vulnerable Software and Affected Versions: Elvaco affected versions not specified Description: The issue arises from insufficiently protected credentials, potentially allowing an attacker to impersonate Elvaco and send false information. Recommendations: At the moment, there is no...

PT-2024-33427 · Marco Heine · Marco Heine Pdf-Rechnungsverwaltung

Name of the Vulnerable Software and Affected Versions: Marco Heine PDF-Rechnungsverwaltung versions 0.0.1 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion...