PT-2024-40069 · Prism +1 · Prism +1

Name of the Vulnerable Software and Affected Versions: codehighlight extension affected versions not specified Description: The issue concerns a vulnerable version of the 3rd party JavaScript component prism bundled with the codehighlight extension, which is susceptible to Regular expression Deni...

PT-2024-4725 · Unknown · Проект-Смартпро

Name of the Vulnerable Software and Affected Versions: Проект-СмартПРО affected versions not specified Description: The issue is related to the lack of authentication attempt restrictions in the software. This could allow a remote attacker to perform a brute force attack. Recommendations: At the...

PT-2024-40413 · Packagist · Drupal Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: A visit to the install.php endpoint can cause cached data to become corrupted, potentially impairing a site until caches are rebuilt. Recommendation...

PT-2024-3712 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to type confusion errors in the Windows Cloud Files Mini Filter Driver, which can be exploited to disclose protected information. This...

PT-2024-24108 · Hewlett Packard +1 · Aos-8 Instant/Aos-10 Ap +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities results i...

PT-2024-24114 · Hewlett Packard +1 · Aos-8 Instant/Aos-10 Ap +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Unauthenticated Denial of Service DoS vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these...

PT-2024-3611 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system. No information is provided...

PT-2024-3713 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a buffer overflow in memory, which can lead to the disclosure of protected information. Attackers may exploit this to obtain sensiti...

PT-2024-25053 · Sap · Application Server

Name of the Vulnerable Software and Affected Versions: SAP Replication Server affected versions not specified Description: The issue allows an attacker to execute certain commands through a gateway to RSSD, potentially causing the Replication Server to crash due to memory corruption. This has a...

PT-2024-3575 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to incorrect restriction of XML links to external objects, which can be exploited by an attacker to gain unauthorized access to protected informatio...

PT-2024-3711 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue exists due to the failure to neutralize special elements in Windows Deployment Services. This allows a remote attacker to disclose protected information. The...

PT-2024-24113 · Hewlett Packard +1 · Aos-8 Instant/Aos-10 Ap +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Unauthenticated Denial of Service DoS vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these...

PT-2024-29388 · Unknown · Manage Bank Statement Reprocessing Rules

Name of the Vulnerable Software and Affected Versions: Manage Bank Statement ReProcessing Rules affected versions not specified Description: The issue is related to insufficient authorization checks for authenticated users, leading to potential escalation of privileges. An attacker can exploit th...

PT-2024-3625 · Ge Healthcare · Ge Healthcare Echopac

Name of the Vulnerable Software and Affected Versions: GE HealthCare EchoPAC affected versions not specified Description: The issue is related to the use of predefined credentials in the software. Exploitation of this issue may allow a remote attacker to elevate privileges and execute arbitrary...

PT-2024-3545 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-24105 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point affected versions not specified Description: The issue is related to a command injection vulnerability in the deauthentication service. This could lead to unauthenticated remote code execution by sending specially crafted...

PT-2024-3587 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Cryptographic service of Windows operating systems. This can be exploited by a remote attacker ...

PT-2024-3600 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue is related to insufficient access control in the Brokering File System BFS of Windows Server, allowing an attacker to elevate their privileges. This can impact the system,...

PT-2024-24115 · Unknown · Access Point

Name of the Vulnerable Software and Affected Versions: Access Point affected versions not specified Description: An unauthenticated Denial-of-Service DoS vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this issue results in the abili...

PT-2024-3577 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to errors of numerical truncation in the Windows RRAS service of the Windows operating system. It allows a remote attacker to...