PT-2024-3516 · Microsoft · Windows Mobile Broadband Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Broadband Driver affected versions not specified Description: The issue is related to an integer overflow in the Windows Mobile Broadband Driver, which can be exploited by a remote attacker to execute arbitrary code. This allow...

PT-2024-26296 · Unknown · Surveyking

Name of the Vulnerable Software and Affected Versions: SurveyKing version 1.3.1 Description: The issue allows attackers to execute a session replay attack after a user changes their password. Recommendations: For SurveyKing version 1.3.1, at the moment, there is no information about a newer versi...

PT-2024-25039 · Unknown · Wpa Supplicant

Name of the Vulnerable Software and Affected Versions: wpa supplicant affected versions not specified Description: The issue is related to a permission verification vulnerability in the wpa supplicant module. Successful exploitation of this vulnerability will affect availability. Recommendations:...

PT-2024-25043 · Unknown · Account Module

Name of the Vulnerable Software and Affected Versions: Account module affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the account module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the...

PT-2024-14710 · Unknown · Soundtrigger Module

Name of the Vulnerable Software and Affected Versions: soundtrigger module affected versions not specified Description: A race condition vulnerability exists in the soundtrigger module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no...

PT-2024-14574 · Unknown · Rsmc Module

Name of the Vulnerable Software and Affected Versions: RSMC module affected versions not specified Description: The issue is a double-free vulnerability in the RSMC module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there is no...

PT-2024-6444

Name of the Vulnerable Software and Affected Versions Flask CORS versions affected versions not specified Description The issue is related to incorrect handling of logical operations in the Flask CORS library, which is used in Python products stored in PyPi. This can allow a remote attacker to...

PT-2024-5502 · Umi Cms · Umi Cms

Name of the Vulnerable Software and Affected Versions: UMI CMS affected versions not specified Description: The issue is related to the lack of protection against SQL query structure exploitation in UMI CMS, a multi-site content management system. This could allow a remote attacker to execute...

PT-2024-25516 · Qt · Qt Framework

Name of the Vulnerable Software and Affected Versions: Qt Framework affected versions not specified Description: The issue could be exploited in applications that make use of the QStringDecoder. There is no information about the estimated number of potentially affected devices worldwide or...

PT-2024-25225 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS version 2.7.0 Description: An issue in Open5GS allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration. Recommendations: For Open5GS version 2.7.0, at the moment, there is no information about a new...

PT-2024-40772 · Git +1 · Pjsip

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the encode base64 differential function...

PT-2024-27196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the devlink reload process accessing hardware resources before the hardware is initialized, which may lead to a kernel crash. This is resolved by registering the...

PT-2024-4592 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java affected versions not specified Description: The issue is related to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, allowing attackers to perform Denial of Service DoS attacks on the...

PT-2024-3629 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 Description: The issue is related to an improper handling of unexpected data type, which could be exploited by a remote unauthenticated attacker to cause a denial of service. Recommendation...

PT-2024-28515 · Ptc · Ptc Codebeamer

Name of the Vulnerable Software and Affected Versions: PTC Codebeamer affected versions not specified Description: The issue is a cross-site scripting vulnerability that could allow an attacker to inject and execute malicious code. Recommendations: At the moment, there is no information about a...

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that's vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue, tracked as CVE-2023-49606, carries a CVSS score of 9.8 out of a maximum of 10, per Cisco Talos, which...

PT-2024-13097 · Qualcomm · Snapdragon +54

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption when the bandpass filter order received from AHAL is not within the expected range. This can lead to improper...

PT-2024-18897 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing a protected 802.11az Fine Time Measurement FTM frame. This affects the parsing of specific...

PT-2024-18507 · Atf Spm · Atf Spm

Name of the Vulnerable Software and Affected Versions: atf spm affected versions not specified Description: The issue is related to a logic error in atf spm that allows remapping physical memory to virtual memory. This could lead to local escalation of privilege, with System execution privileges...

PT-2024-40756 · Avif · Avif

Name of the Vulnerable Software and Affected Versions: avif affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the avifSequenceHeaderParse function, which is called by avifDecoderReset and avifDecoderParse...