PT-2024-4666 · Microsoft · Azure Arc-Enabled Kubernetes Extension Cluster

Name of the Vulnerable Software and Affected Versions: Azure Arc-enabled Kubernetes Extension Cluster affected versions not specified Description: The issue is related to insufficient access controls in Azure Arc-enabled Kubernetes extensions, which can be exploited by a remote attacker to elevat...

PT-2024-3002 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to a buffer overflow in the heap of the Windows Telephony Server, which can allow an attacker to elevate their privileges. This can affect the system,...

PT-2024-3017 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC SQL Server ODBC Driver affected versions not specified Description: The issue is related to a buffer overflow in the heap of the WDAC OLE DB driver for SQL Server on the Windows operating system. This can allow a remote attacke...

PT-2024-2805 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the implementation of the Secure Boot protocol in Windows operating systems. This vulnerability is associated with a...

PT-2024-23580 · Unknown · Ros2 Galactic Geochelone

Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: An issue was discovered in ROS2 Galactic Geochelone, allowing remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Galactic...

PT-2024-2777 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory during the implementation of the Secure Boot protocol in Windows operating systems. This could allow an attacker to bypass security...

PT-2024-3004 · Microsoft · Windows Usb Print Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Print Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information...

PT-2024-3027 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in Windows Storage Services, which is caused by insecure privilege management. This vulnerability can be exploited by an...

PT-2024-17546 · Red Hat · Jboss Eap

Name of the Vulnerable Software and Affected Versions: JBoss EAP affected versions not specified Description: A flaw was found in JwtValidator.resolvePublicKey in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior i...

PT-2024-4622 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. It allows an attacker to elevate their privileges...

PT-2024-2982

Name of the Vulnerable Software and Affected Versions Windows CSC Service affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows CSC Service, which can be exploited due to improper address validation in IOCTL with METHOD NEITHER...

PT-2024-3275 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Brokering File System BFS of Windows Server, allowing an attacker to potentially elevate their...

PT-2024-2810 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the BitLocker data protection function of the Microsoft Windows operating system. This vulnerability is associat...

PT-2024-5018 · Unknown +2 · Rpm-Ostree +2

Name of the Vulnerable Software and Affected Versions: rpm-ostree affected versions not specified Description: A security issue has been found in rpm-ostree, related to the /etc/shadow file having the world-readable bit enabled in default builds. This is due to default permissions being set highe...

PT-2024-2839 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the Secure Boot protocol implementation, which can be exploited to bypass security restrictions. This could allow an attacker to affect the...

PT-2024-3303 · Microsoft · Windows Distributed File System +1

Name of the Vulnerable Software and Affected Versions: Windows Distributed File System DFS affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Distributed File System DFS. It is caused by a buffer overflow in memory, which ca...

PT-2024-3202 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

PT-2024-3296 · Microsoft · Windows Distributed File System +1

Name of the Vulnerable Software and Affected Versions: Windows Distributed File System DFS affected versions not specified Description: The issue is related to synchronization errors in the Windows Distributed File System DFS, specifically a "race condition" situation when using a shared resource...

PT-2024-14612 · Iaware · Iaware

Name of the Vulnerable Software and Affected Versions: Iaware module affected versions not specified Description: The issue concerns improper authentication in the Iaware module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no informatio...

PT-2024-22117 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is described as an input verification vulnerability in the log module. Successful exploitation of this vulnerability can affect integrity. The...