PT-2024-25635 · Mfa +2 · Mfa +2

Name of the Vulnerable Software and Affected Versions: MFA affected versions not specified Description: The issue concerns the logout option within MFA, which did not include the necessary token to prevent the risk of users being inadvertently logged out via CSRF. Recommendations: At the moment,...

PT-2024-36470 · Luxion · Luxion Keyshot Viewer

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this issue, where the...

PT-2024-36477 · Luxion · Luxion Keyshot

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this, where the target must visit a...

PT-2024-36500 · Unknown · Astrotalks

Name of the Vulnerable Software and Affected Versions: Astrotalks version 10/03/2023 Description: The issue allows unregistered users to access all internal links of the application without providing any credentials. This is an information exposure vulnerability. Recommendations: For version...

PT-2024-25637 · Alt Linux +1 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to insufficient checks for ReCAPTCHA enablement, allowing bypass of checks on the login page. This issue does not affect other pages where ReCAPTCHA is used...

PT-2024-35504 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2024-35524 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the target must...

PT-2024-26849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the devlink reload process accesses hardware resources during pf initialization, but the register operation is done before the hardware is initialized, potentially...

PT-2024-40355 · Packagist · Typo3/Cms

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue concerns a brute force protection mechanism in the backend login system. This mechanism pauses for 5 seconds when incorrect credentials are provided. However, it is possible to...

PT-2024-40408 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 affected versions not specified Description: A issue has been found where calling a PHP script, delivered with TYPO3 for testing purposes, reveals the absolute server path to the TYPO3 installation. Recommendations: At the moment, there...

PT-2024-27223 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the NFSD component in the Linux kernel, specifically with the nfsd4 encode fattr4 function. The problem arises because args.acl is not initialized early and is...

PT-2024-40534 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows existing sessions for a user account to remain active even after the user changes their password. To exploit this, an attacker would need a valid user account, either...

CVE-2024-24919

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available...

PT-2024-12225 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 affected versions not specified Description: An issue in Linksys E5600 routers allows attackers to hijack TCP sessions, potentially leading to a denial of service. Recommendations: At the moment, there is no information about a...

PT-2024-9688 · D Link · D-Link Dap-1513

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1513 version REVA FIRMWARE 1.01 Description: A null pointer dereference in the /bin/webs binary of the firmware allows attackers to cause a Denial of Service DoS via a crafted web request without authentication. When the /bin/webs...

PT-2024-40479 · Osv · Osv

Name of the Vulnerable Software and Affected Versions: OSV affected versions not specified Description: The issue concerns a form that may populate a PasswordField with submitted data, reflecting it back to the user. This behavior is not considered best practice, as it may expose the user's own...

PT-2024-35501 · D Link · D-Link D-View

Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanis...

PT-2024-40342 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A high-level XSS risk has been identified in the encoding of validation messages in certain FormField classes. This issue affects form fields that present invalid content as part of...

PT-2024-11350 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the virtio-net component in the Linux kernel, where validation for used length from potentially untrusted devices was missing, which could lead to data corrupti...

PT-2024-41051 · Xxd · Xxd

Name of the Vulnerable Software and Affected Versions: xxd affected versions not specified Description: The issue is related to a buffer overflow in xxd when colored output is used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...