PT-2024-40587 · Git +1 · Libultrahdr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the format message function, which is called by...

PT-2025-2739 · Netalertx · Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertx affected versions not specified Description: The issue is related to an unauthenticated Remote Code Execution RCE in NetAlertx. The vulnerability is being actively exploited. No specific details about affected devices or real-world...

PT-2024-6815 · Unknown · Zangi Private Messenger

Name of the Vulnerable Software and Affected Versions: Zangi Private Messenger affected versions not specified Description: The issue is related to weaknesses in the session key generation mechanism of the application. This could allow a remote attacker to implement a "man-in-the-middle" attack...

PT-2024-39469 · Adobe · Pdf

Name of the Vulnerable Software and Affected Versions: Adobe PDF affected versions not specified Description: A remote code execution issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information...

Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [CVE-2020-27618]

Summary Redhat provided glibc is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2020-27618 Vulnerability Details CVEID:CVE-2020-27618 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by an err...

PT-2024-39516 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to delete arbitrary files within sensitive directories on affected installations of Logsign Unified SecOps Platform. Authenticatio...

PT-2024-30621 · Gotenna · Gotenna Pro Atak Plugin

Name of the Vulnerable Software and Affected Versions: goTenna Pro ATAK Plugin affected versions not specified Description: The goTenna Pro ATAK Plugin application stores encryption keys along with a static IV on the device, allowing for complete decryption of keys stored on the device. This...

CVE-2024-45613 CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package

CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting XSS vulnerability is present in the CKEditor 5 clipboard package. This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code...

PT-2024-32370 · E-Tax · E-Tax

Name of the Vulnerable Software and Affected Versions: e-Tax software affected versions not specified Description: A privilege chaining issue exists in the installer of the e-Tax software, allowing a malicious DLL prepared by an attacker to be executed with higher privileges than the application...

PT-2024-6802 · Passwork · Passwork

Name of the Vulnerable Software and Affected Versions: Passwork affected versions not specified Description: The issue is related to the lack of protection measures for the web page structure in the password manager Passwork. This can be exploited by a remote attacker to perform a DOM Based XSS...

PT-2024-30620 · Unknown · Progauge Maglink Lx Console

Name of the Vulnerable Software and Affected Versions: ProGauge MAGLINK LX CONSOLE affected versions not specified Description: A specially crafted POST request to the "UTILITY sub-menu" can allow a remote attacker to inject arbitrary commands. This issue affects the ProGauge MAGLINK LX CONSOLE,...

PT-2024-9562 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the management system. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

PT-2024-30576 · Unknown · Progauge Maglink Lx4 Console

Name of the Vulnerable Software and Affected Versions: ProGauge MAGLINK LX4 CONSOLE affected versions not specified Description: The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed. Recommendations: At the momen...

PT-2025-3748 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in a component of the Android operating system framework. This could allow an attacker to elevate their privileges. There is a potentia...

PT-2024-30187 · Linuxptp +1 · Linuxptp +1

Name of the Vulnerable Software and Affected Versions: linuxptp versions 4.2 and earlier Description: The issue allows a remote attacker to cause a denial of service via a crafted Pdelay Req message to the time synchronization function. This can be exploited by sending a specifically crafted...

PT-2024-37863 · Moxa · Mxview One Series +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue occurs when an attacker exploits a race condition between the time a file is checked and the time it is used, known as a...

PT-2024-6333 · Rockwell Automation · Rslogix 5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation RSLogix 5 affected versions not specified Description: A feature in the affected products enables users to prepare a project file with an embedded VBA script and can be configured to run once the project file has been open...

PT-2024-38168 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: A flaw was found in Envoy, allowing modification or manipulation of headers from external clients when pass-through routes are used for the ingress gateway. This issue could enable a maliciou...

PT-2024-32165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, where the maximum size of a subrequest that writes to cachefiles has been set to MAX RW COUNT. This change prevents overrunning the maximum write tha...

PT-2024-23823 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid...