PT-2024-17908 · Ashlar Vellum · Ashlar-Vellum Graphite

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Graphite affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this issue, where th...

PT-2024-26998 · Swissphone · Swissphone Dical-Red 4009

Name of the Vulnerable Software and Affected Versions: Swissphone DiCal-RED 4009 affected versions not specified Description: The issue allows a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password...

PT-2024-36588 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this issue. The specific flaw exists within the...

PT-2024-7524 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability in the ASMKERN230A.dll library of Autodesk AutoCAD, which can be exploited through a specially crafted CATPART file. Th...

PT-2024-7532 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a memory buffer overflow in the AcTranslators.exe executable file of Autodesk AutoCAD. This can be exploited by using a specially crafted STEP file,...

PT-2024-27000 · Swissphone · Swissphone Dical-Red 4009

Name of the Vulnerable Software and Affected Versions: Swissphone DiCal-RED 4009 devices affected versions not specified Description: An issue was discovered on Swissphone DiCal-RED 4009 devices, where an attacker with access to the file /etc/deviceconfig may recover the administrative device...

CVE-2024-43411 CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 and above. In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they could potentially execute an attack on...

CVE-2023-49198 Apache SeaTunnel Web: Arbitrary file read vulnerability

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users...

PT-2024-40565 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as chunk free object, sfclose, and pdfi close file. No...

PT-2024-40567 · Git +1 · Simdutf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write error. Technical details include the crash type and state, specifically mentioning...

CVE-2024-42102 affecting package kernel for versions less than 5.15.164.1-1

CVE-2024-42102 affecting package kernel for versions less than 5.15.164.1-1. An upgraded version of the package is available that resolves this issue...

PT-2024-6695 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...

PT-2024-21722 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to improper access controls, allowing backend users to overwrite their username even when it is disallowed. Recommendations: At the moment, there is no information abo...

PT-2024-11941 · Cisco · Cisco Webex

Name of the Vulnerable Software and Affected Versions: Cisco WebEx affected versions not specified Description: A buffer overflow issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

PT-2024-21721 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. No information is provided about the estimated number...

PT-2024-11675 · Cisco · Cisco Webex

Name of the Vulnerable Software and Affected Versions: Cisco WebEx affected versions not specified Description: A critical authentication bypass issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no...

PT-2024-8617 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: moodle affected versions not specified Description: A flaw was found in the moodle virtual learning environment related to insufficient capability checks. This issue makes it possible for users with access to restore glossaries in courses to...

PT-2024-41074 · Ооо 'Нпо Мир' · Контроллер Мир Кт-51 +3

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the implementation of the HTTP protocol in software products, which involves the transmission of data in an open format. This could allow a remote attacker to disclos...

PT-2024-41071 · Ооо 'Нпо Мир' · Конфигуратор Контроллеров Мир +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue may allow an attacker to gain unauthorized access to protected...

PT-2024-29826 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the drm client buffer vmap local function, which accidentally returns zero or success on the failure path. This leads to locking issues and an uninitialized map...