PT-2024-6793 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps for...

PT-2024-19851 · Qualcomm · Snapdragon +13

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs during network scan requests. This can potentially lead to exploitation. No information is provided abo...

PT-2024-41088 · Paste · Paste

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The creator of the crate paste has stated that this project is no longer maintained and has archived the repository. Recommendations: At the moment, there is no information about a newer...

PT-2024-19853

Name of the Vulnerable Software and Affected Versions MSM module affected versions not specified Description The issue involves memory corruption when invoking IOCTL calls for the MSM module from user space during audio playback and record. This occurs due to improper handling of IOCTL calls,...

PT-2024-8137

Name of the Vulnerable Software and Affected Versions: Rockwell Automation PowerFlex 600T affected versions not specified Description: The issue is related to insufficient exception handling in the PowerFlex 6000T variable frequency drive's firmware, which can be exploited by a remote attacker to...

PT-2024-27996 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure when sending an implicit broadcast that contains app launch details. This implies a potential leak of sensitiv...

PT-2024-32656 · Xerox · Freeflow Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A remote code execution RCE issue exists due to path traversal before authentication, allowing for pre-authentication remote code execution...

PT-2024-32657 · Xerox · Freeflow Core

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An authenticated remote code execution issue occurs through path traversal, allowing for remote code execution. Recommendations: At the moment, there is no information about a newer versio...

PT-2024-32926 · Solidigm · Solidigm Dc Products

Name of the Vulnerable Software and Affected Versions: Solidigm DC Products affected versions not specified Description: The issue is related to improper access removal handling in the firmware of some Solidigm DC Products. This flaw may allow an attacker with physical access to gain unauthorized...

PT-2024-31506 · Cavok · Cavok

Name of the Vulnerable Software and Affected Versions: Cavok affected versions not specified Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command, also known as CWE-89. This vulnerability occurs because...

PT-2024-18588 · Mediatek · Mediatek Mt8796 Wlan Driver

Name of the Vulnerable Software and Affected Versions: MediaTek MT8796 WLAN Driver affected versions not specified Description: The issue is related to a possible out of bounds write in the wlan driver due to improper input validation. This could lead to remote code execution with no additional...

PT-2024-31508 · Zkteco · Zkteco

Name of the Vulnerable Software and Affected Versions: ZKteco affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor, labeled as CWE 200. This flaw allows sensitive information to be exposed. Recommendations: At the moment,...

PT-2024-32552 · Wpexperts · Wpexperts Square For Givewp

Name of the Vulnerable Software and Affected Versions: WPExperts Square For GiveWP versions 1.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2024-32715 · Unknown · Shilpi Client Dashboard

Name of the Vulnerable Software and Affected Versions: Shilpi Client Dashboard affected versions not specified Description: This issue is due to missing restrictions for incorrect login attempts on the API-based login of the Shilpi Client Dashboard. A remote attacker could exploit this by...

PT-2024-37630 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue occurs in the utf8 trunc function found in zephyr/lib/utils/utf8.c, where last byte p might point to the byte just before the string pointer if the string is empty. This is a buffe...

PT-2024-8630 · Cisco · Cisco Nexus Dashboard Fabric Controller

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard Fabric Controller NDFC affected versions not specified Description: The issue is related to the improper storage of sensitive information within backup files, allowing an attacker with access to these files to view...

PT-2024-8626 · Cisco · Cisco Nexus Dashboard

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an...

PT-2024-40589 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving methods in java.base, specifically java.util.Arrays.copyOfRange, java.lang.StringUTF16.newString, and...

PT-2024-31581 · Spectra · Ons-S8

Name of the Vulnerable Software and Affected Versions: ONS-S8 - Spectra Aggregation Switch affected versions not specified Description: The web server for ONS-S8 - Spectra Aggregation Switch includes an incomplete authentication process, which can lead to an attacker authenticating without a...

PT-2024-9366 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager AEM affected versions not specified Description: The issue is related to insufficient input validation in the Adobe Experience Manager AEM content and media data management system. Exploitation of this issue could all...