PT-2024-38011 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue allows sensitive variables to be printed in the task log in clear-text under certain circumstances. Recommendations: At the moment, there is no information about a newer...

PT-2024-40824 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: FLAC affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the FLAC replaygain synthesis apply gain function, which is called from the write callback and...

CVE-2024-41672 DuckDB: sniff_csv provides filesystem access even when enable_external_access is disabled

DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in filesystem is accessible for reading using sniffcsv, even with enableexternalaccess=false. This vulnerability provides an attacker with access to filesystem even when access is expected to be disabled and other...

Security Bulletin: Security Vulnerability fixed in IBM Security Directory Integrator (CVE-2022-32759)

Summary The IBM Security Directory Integrator product uses insufficient session expiration which affects the IBM Security Directory Server. The issue has been addressed in an update. Vulnerability Details CVEID:CVE-2022-32759 DESCRIPTION: IBM Security Directory Server uses insufficient session...

PT-2024-29289 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateways affected versions not specified Description: An authenticated command injection issue exists in the Command Line Interface of the affected software. This allows for the execution of arbitrary...

PT-2024-27632 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue could disclose sensitive user information to another user with physical access to the machine. Recommendations: For IBM InfoSphere Information Server version 11.7, at the...

PT-2024-38065 · Red Hat · Openshift Console

Name of the Vulnerable Software and Affected Versions: Openshift console affected versions not specified Description: A flaw was found in the Openshift console, specifically in the /API/helm/verify endpoint, which is responsible for fetching and verifying the installation of a Helm chart from a...

PT-2024-25292 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan Gateway

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateway affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated remote attacker to conduct a server-side prototype pollution attac...

PT-2024-29286 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan Gateway

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateway affected versions not specified Description: A vulnerability exists in the Command Line Interface of the HPE Aruba Networking EdgeConnect SD-WAN gateway, allowing remote authenticated users to r...

PT-2024-10545 · Eltex · Eltex Smg-1016M

Name of the Vulnerable Software and Affected Versions: Eltex SMG-1016M affected versions not specified Description: The issue exists due to the lack of measures to neutralize special elements in the Eltex SMG-1016M trunk gateway's firmware. Exploitation of this issue may allow a remote attacker t...

PT-2024-38211 · Comodo · Comodo Internet Security

Name of the Vulnerable Software and Affected Versions: Comodo Internet Security Pro affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the targ...

PT-2024-38210 · Comodo · Comodo Internet Security

Name of the Vulnerable Software and Affected Versions: Comodo Internet Security Pro affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the targ...

PT-2024-28145 · Unknown · Academy Lms

Name of the Vulnerable Software and Affected Versions: Academy LMS versions n/a through 2.0.4 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS. Recommendations: For versions n/a through 2.0.4, at the moment, there is no...

PT-2024-28119 · Unknown · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro versions 1.1.13 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-29422 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A stack overflow in the Tenda AX1806 allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Tenda AX1806 version 1.0.0.1, at the moment, there is no information...

PT-2024-22707 · Hewlett Packard · Hp Application Enabling Software Driver +1

Name of the Vulnerable Software and Affected Versions: HP Application Enabling Software Driver affected versions not specified Description: The issue is related to potential vulnerabilities identified in the HP Display Control software component within the HP Application Enabling Software Driver,...

PT-2024-5268 · Unitronics · Unitronics Vision Plc

Name of the Vulnerable Software and Affected Versions: Unitronics Vision PLC affected versions not specified Description: The issue is related to improper check or handling of exceptional conditions, which may allow denial of service. An attacker, acting remotely, can exploit this to cause a...

PT-2024-23795

Name of the Vulnerable Software and Affected Versions Xapi affected versions not specified Description Xapi contains functionality to backup and restore metadata about Virtual Machines and Storage Repositories SRs. The metadata itself is stored in a Virtual Disk Image VDI inside an SR. A maliciou...

PT-2024-37892 · Zowe Cli · Zowe Cli

Name of the Vulnerable Software and Affected Versions: Zowe CLI affected versions not specified Description: A local, privileged actor can store previously entered secure credentials in a plaintext file as part of an auto-init operation. Recommendations: At the moment, there is no information abo...

PT-2024-23794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns an optional feature of PCI MSI called "Multiple Message" that allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these...