PT-2024-11244 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a tx fixup skb leak in the Linux kernel when usbnet transmits a skb and eem fixup is applied in eem tx fixup. If skb copy expand fails, it returns NULL, and...

PT-2024-38978

Name of the Vulnerable Software and Affected Versions: AngularJS versions all Description: The issue is related to improper sanitization of the value of the srcset attribute in HTML elements in AngularJS, allowing attackers to bypass common image source restrictions. This can also lead to a form ...

PT-2024-40259 · Passbolt · Passbolt

Name of the Vulnerable Software and Affected Versions: Passbolt affected versions not specified Description: The issue concerns the /auth/verify.json endpoint, which returns a JSON containing the cookies sent in the request. This could allow an attacker who exploits an XSS vulnerability to retrie...

PT-2024-6405 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

PT-2024-21889 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport acknowledge delay in the netrom component. Recommendations: At the moment, there is no information about a newer...

PT-2024-19948

Name of the Vulnerable Software and Affected Versions Client Deploy Tool affected versions not specified Description An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems. Recommendations At the moment...

PT-2024-21884 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom link fails count in the netrom component. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-24640 · Highfivery Llc · Zero Spam

Name of the Vulnerable Software and Affected Versions: Zero Spam versions n/a through 5.5.6 Description: The issue is related to a Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam, which allows the removal of important client functionality. Recommendations...

PT-2024-40044 · Neos · Neos

Name of the Vulnerable Software and Affected Versions: Neos affected versions not specified Description: The issue allows unauthorized access to internal workspaces in Neos without authentication. This means that internal workspaces, which are non-public and do not have an owner, can be viewed by...

PT-2024-23472 · Unknown · Wholesalex

Name of the Vulnerable Software and Affected Versions: WholesaleX versions 1.3.2 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in WholesaleX. Recommendations: For versions 1.3.2 and earlier, update to a version that contains a fix fo...

CVE-2023-48368

Improper input validation in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

Security Bulletin: IBM Security Guardium is affected by a Kernel vulnerability (CVE-2023-3609)

Summary IBM Security Guardium has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2023-3609 DESCRIPTION: Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw in the net/sched: clsu32 component...

PT-2024-13233 · Intel +2 · Intel Media Sdk +2

Name of the Vulnerable Software and Affected Versions: IntelR Media SDK affected versions not specified Description: The issue is related to improper buffer restrictions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: At the...

PT-2024-13237 · Intel · Intel Power Gadget

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for Windows affected versions not specified Description: The issue is related to improper initialization in the IntelR Power Gadget software, which may allow an authenticated user to potentially enable denial of...

PT-2024-12158 · Intel · Intel Bios Guard Firmware

Name of the Vulnerable Software and Affected Versions: IntelR BIOS Guard firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR BIOS Guard firmware, which may allow a privileged user to potentially enable escalation of privilege via...

PT-2024-19895 · Intel · Intel Server D50Dnp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server D50DNP Family products affected versions not specified Description: The issue is related to improper input validation in the UserAuthenticationSmm driver in UEFI firmware, which may allow a privileged user to enable escalation o...

PT-2024-4548 · Cisco · Cisco Asyncos

Name of the Vulnerable Software and Affected Versions: Cisco AsyncOS Software for Cisco Secure Email Gateway affected versions not specified Description: The issue is related to insufficient input validation of parameters passed to the web-based management API, allowing an unauthenticated, remote...

PT-2024-26235 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: The issue is related to an XML External Entity injection, which could lead to information disclosure and remote code execution. Recommendations: For OpenText iManager version 3.2.6.0200, at th...

PT-2024-40116 · Prism +1 · Prism +1

Name of the Vulnerable Software and Affected Versions: codehighlight extension affected versions not specified Description: The issue concerns a vulnerable version of the 3rd party JavaScript component prism bundled with the codehighlight extension, which is susceptible to Regular expression Deni...

PT-2024-31925 · Alpitronic · Alpitronic Hypercharger Ev Charging Devices

Name of the Vulnerable Software and Affected Versions: alpitronic Hypercharger EV charging devices affected versions not specified Description: The issue concerns alpitronic Hypercharger EV charging devices that can expose a web interface protected by authentication if misconfigured. If the defau...