PT-2024-5627 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in the heap of the Windows Routing and Remote Access Service RRAS, which can be exploited by a remote attack...

PT-2024-5626 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in pointer dereferencing in the implementation of Network Address Translation NAT technology in Windows operating systems. This can be exploited by a remote...

PT-2024-6173 · Sap · Sap Commerce Cloud

Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud affected versions not specified Description: The issue is related to errors in processing information in the OCC API Endpoint component of SAP Commerce Cloud. This could allow a remote attacker to gain unauthorized access t...

PT-2024-37190 · Pepperl+Fuchs · Icdm-Rx/En-2Db9/Rj45-Din +51

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the affected device once. This issu...

PT-2024-5713 · Microsoft · Windows Reliable Multicast Transport Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Reliable Multicast Transport Driver RMCAST affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in the Windows Reliable Multicast Transport Driver RMCAST. This vulnerability can be...

PT-2024-12271 · Unknown · Power Management Firmware

Name of the Vulnerable Software and Affected Versions: Power Management Firmware PMFW affected versions not specified Description: The issue is related to improper input validation in Power Management Firmware PMFW, which may allow an attacker with privileges to send a malformed input for the set...

PT-2024-5639 · Microsoft · Windows Dns +1

Name of the Vulnerable Software and Affected Versions: Windows DNS affected versions not specified Description: The issue is related to insufficient authentication of data in the Windows DNS service, allowing a remote attacker to conduct spoofing attacks. This can affect the system, posing a...

PT-2024-27887 · Microsoft · Azure Connected Machine Agent

Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Connected Machine Agent. There is no information provided about the estimated number of...

PT-2024-5707 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in Windows Deployment Services. This vulnerability can be exploited by a remote attacker to execute arbitra...

Security Bulletin: IBM Common Licensing is affected by a Weak Password Policy vulnerability (CVE-2024-40697)

Summary IBM LKS Administration and Reporting Tool and Administration Agent does not require that users should have passwords of defined length by default, which makes it easier for attackers to compromise user accounts. This has been addressed in remediation section. Vulnerability Details...

PT-2024-6831 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to unrestricted file upload of dangerous file types. An authenticated attacker can upload malicious code over the network,...

PT-2024-32254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer access issue has been resolved in the Linux kernel's wifi module, specifically in mt76 and mt7921. The issue occurred when disabling wifi, and the mt7921 ipv6 addr change...

PT-2024-7803 · Autodesk · Autodesk Navisworks

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: The issue is related to an Out-of-Bounds Write vulnerability in the dwfcore.dll library of Autodesk Navisworks, caused by a maliciously crafted DWFX file. This can allow a...

PT-2024-7801 · Autodesk · Autodesk Navisworks +1

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. This issue allows a malicious actor to cause a...

PT-2024-10427 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to incorrect permission storage in the Zabbix monitoring system. This allows an unauthorized user to access and view host count and other statistics through the System...

PT-2024-7369 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server. An attacker can exploit this by sending a specially crafted API request to obtain user informatio...

PT-2024-29697 · Unknown · Settings Module

Name of the Vulnerable Software and Affected Versions: Settings module affected versions not specified Description: The issue is related to an access permission verification vulnerability in the Settings module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-29701 · Unknown · App Multiplier Module

Name of the Vulnerable Software and Affected Versions: App Multiplier module affected versions not specified Description: The issue is related to a permission control vulnerability in the App Multiplier module. Successful exploitation of this vulnerability may affect functionality and...

PT-2024-38092 · Adobe · Pdf

Name of the Vulnerable Software and Affected Versions: Adobe PDF affected versions not specified Description: A heap-based buffer overflow issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no...

PT-2024-38442 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this...