PT-2024-4546 · Unknown · Myscada Mypro

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO affected versions not specified Description: The issue is related to the use of hard-coded credentials in mySCADA myPRO, which could allow a remote attacker to execute code on the affected device. The hardcoded password is bruml...

PT-2024-18887 · Qualcomm · Snapdragon +57

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure while parsing sub-IE length during new IE generation. No estimated number of potentially affected devices or...

PT-2024-7168 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to a buffer overflow in the Qualcomm embedded platform software, which can cause a transient denial of service DOS when parsing probe respon...

PT-2024-18564 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds write in the gnss service due to improper input validation. This could lead to local escalation of privilege, with System execution...

PT-2024-40804 · Git +1 · Libultrahdr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, which involve the ultrahdr::getYuv420Pixel...

PT-2024-27446

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description It was identified that under certain specific preconditions, an API key that was originally created with specific privileges could be subsequently used to create new API keys that hav...

PT-2024-27894 · Concept Intermedia · S@M Cms

Name of the Vulnerable Software and Affected Versions: S@M CMS Concept Intermedia affected versions not specified Description: The issue concerns a blind SQL Injection that can be executed using the search bar in sites managed by S@M CMS. It is noted that only a part of the observed services is...

PT-2024-28388 · Unknown · Luci-App-Lucky

Name of the Vulnerable Software and Affected Versions: luci-app-lucky version 2.8.3 Description: The issue is related to hardcoded credentials in the software. Recommendations: For luci-app-lucky version 2.8.3, update to a version where the hardcoded credentials issue is resolved, if available. A...

PT-2024-28477 · Telsat · Telsat Markoni Fm Transmitters

Name of the Vulnerable Software and Affected Versions: TELSAT marKoni FM Transmitters affected versions not specified Description: The issue allows users to gain unauthorized access to sensitive information or perform actions beyond their designated permissions. Recommendations: At the moment,...

PT-2024-5105 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network. The vulnerability is related to the use of an...

PT-2024-6693 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to a use-after-free vulnerability in the handling of AcroForms in Foxit PDF Reader. This vulnerability allows remote attackers to execute arbitrary code on...

PT-2024-4540 · Vmware · Vmware Vcenter Server +2

Name of the Vulnerable Software and Affected Versions: vCenter Server affected versions not specified VMware Cloud Foundation affected versions not specified Description: The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may...

PT-2024-4322 · Rockwell Automation · Thinmanager

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ThinManager ThinServer affected versions not specified Description: The issue is related to improper input validation in the ThinServer component of Rockwell Automation ThinManager, allowing an unauthenticated threat actor...

AZL-42898 CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

PT-2024-28268 · Wavlink · Wavlink Wn551K1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 affected versions not specified Description: The issue allows attackers to obtain sensitive router information through the 'live check.shtml' endpoint. Recommendations: At the moment, there is no information about a newer...

PT-2024-28265 · Wavlink · Wavlink Wn551K1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 affected versions not specified Description: A command injection issue was discovered, which can be exploited through the IP parameter of the "/cgi-bin/touchlist sync.cgi" API endpoint. Recommendations: At the moment, there is...

PT-2024-20446

Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description The issue concerns the use of predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens, such as the API token and the user token. This allows attackers to...

PT-2025-3822

Name of the Vulnerable Software and Affected Versions Ruby affected versions not specified Description The Ruby interpreter is susceptible to the Marvin Attack, which leverages a covert timing channel to transmit data. This issue allows a remote attacker to decrypt previously encrypted messages o...

PT-2024-20442

Name of the Vulnerable Software and Affected Versions Bludit affected versions not specified Description A security issue has been identified, allowing attackers with knowledge of the API token to upload arbitrary files through the "File API" which leads to arbitrary code execution on the server...

CVE-2024-33874 affecting package hdf5 for versions less than 1.14.4.3-1

CVE-2024-33874 affecting package hdf5 for versions less than 1.14.4.3-1. An upgraded version of the package is available that resolves this issue...