PT-2024-4969 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A spoofing vulnerability affects the system, potentially allowing attackers to perform spoofing attacks due to a lack of protection of service data within the Windows NTLM authentication...

PT-2024-4679 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the stack of the Secure Boot protocol implementation in Windows operating systems. This could allow an attacker to bypass existing security...

PT-2024-12688 · Easyappointments +2 · Alextselegidis/Easyappointments +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A BOLA vulnerability in the "GET, PUT, DELETE /customers/customerId" endpoint allows a low-privileged user to fetch, modify, or delete a customer,...

PT-2024-13971 · Samsung · Exynos 990 +15

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modems versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W93...

PT-2024-27480 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. No information is provided about the estimate...

PT-2024-10054 · Lenovo · Lenovo Xclarity Controller

Name of the Vulnerable Software and Affected Versions: Lenovo XClarity Controller XCC affected versions not specified Description: A privilege escalation issue was found in the web interface or SSH captive command shell interface of XCC. This could allow an authenticated XCC user with elevated...

PT-2024-4781 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A denial-of-service vulnerability exists due to a buffer overflow in memory within the Remote Desktop Licensing Service. Successful exploitation could allow a remote attacker to cause a...

PT-2024-5444 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to an integer overflow in the OLE DB driver for SQL Server. Exploitation of this issue could allow a remote attacker to execute arbitra...

PT-2024-5451 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to a memory usage problem after memory has been freed, which can be exploited by a remote attacker to execute arbitrary code...

PT-2024-12684 · Easyappointments +1 · Alextselegidis/Easyappointments +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A BOLA vulnerability in the "GET, PUT, DELETE /webhooks/webhookId" endpoint allows a low-privileged user to fetch, modify, or delete a webhook of any...

PT-2024-4696 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the Secure Boot implementation of Windows operating systems. It involves a buffer overflow in memory, which can be exploit...

PT-2024-4852 · Microsoft · Windows Performance Data Helper Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Performance Data Helper Library affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the...

PT-2024-19023 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Inadequate input validation leads to XSS vulnerabilities in the accessiblemedia field. There is no information provided about the estimated number of...

PT-2024-4857 · Microsoft · Windows Ndis +1

Name of the Vulnerable Software and Affected Versions: Windows Network Driver Interface Specification NDIS affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Network Driver Interface Specification NDIS. It is caused by a buffer...

PT-2024-5474 · Microsoft · Windows Powershell +1

Name of the Vulnerable Software and Affected Versions: Windows PowerShell affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows PowerShell command-line shell. It allows an attacker to elevate their privileges. The issue may be...

PT-2024-20017 · Google +1 · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible arbitrary code execution due to a use after free in the RGXCreateHWRTData aux function of rgxta3d.c. This could lead ...

PT-2024-27872 · Unknown · Medicalis Workflow Orchestrator

Name of the Vulnerable Software and Affected Versions: Medicalis Workflow Orchestrator All versions Description: A vulnerability has been identified in the affected application, which executes as a trusted account with high privileges and network access. This could allow an authenticated local...

PT-2024-37183 · Stitionai · Devika +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an attacker to access sensitive files on the server by providing incorrect file names, which the agent attempts to correct, inadvertently revealing the content of t...

PT-2024-13012 · Kiloview · P1/P2 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A vulnerability exists that allows attackers to download and execute code from a remote location without properly verifying its origin and integrity. This can enable attackers to...

PT-2024-11560 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the use of path.Base to extract the expected HTTP-01 token value, which behaves differently on Windows due to the distinct path...