PT-2024-8381 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the cachestat component in the Linux kernel, which can cause errors when racing with swapping and invalidation. There are two possible bugs: a swapin error can...

PT-2024-22961 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was discovered in DedeCMS, specifically via the component /src/dede/makehtml homepage.php, allowing a remote attacker to execute arbitrary code. Recommendations: For...

PT-2024-13299 · Mesa +2 · Mesa +2

Name of the Vulnerable Software and Affected Versions: Mesa version 23.0.4 Description: A NULL pointer dereference was discovered in Mesa via the function dri2GetGlxDrawableFromXDrawableId. This issue is triggered when the X11 server sends a DRI2 BufferSwapComplete event unexpectedly while the...

PT-2024-23072 · 10Web +1 · Photo Gallery

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The image upload component is affected by an issue where it allows SVG files, and the regular expression used to remove script tags can be bypassed. Thi...

PT-2024-22225 · Webproxy · Webproxy

Name of the Vulnerable Software and Affected Versions: WebProxy versions 1.7.8 through 1.7.9 Description: An OS command injection issue exists, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Recommendations: For...

PT-2025-46749

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the Linux kernel's IPMI driver related to message handling. A reverted patch intended to fix a message stack issue when IPMI is disconnected introduces a potential for a...

PT-2024-21777 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 system affected versions not specified Description: The issue is a Stored Cross-Site Scripting Stored-XSS vulnerability affecting the CIGESv2 system. This allows an attacker to execute and store malicious javascript code in the...

PT-2024-19300

Name of the Vulnerable Software and Affected Versions SAP Lifecycle Manager affected versions not specified Description This issue allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population. Recommendations At...

PT-2024-21774 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 affected versions not specified Description: The issue concerns an information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access the "/vendor/composer/installed.json" endpoint and retrieve all...

PT-2024-19418 · Csmock · Csmock

Name of the Vulnerable Software and Affected Versions: csmock affected versions not specified Description: A vulnerability was found in csmock where a regular user of the OSH service, with a valid Kerberos ticket, can disclose the confidential Snyk authentication token and run arbitrary commands ...

PT-2024-19297

Name of the Vulnerable Software and Affected Versions SailPoint IdentityIQ affected versions not specified Description The issue is a path traversal vulnerability in JavaServer Faces JSF that allows access to arbitrary files in the application server file system. This can be exploited by an...

PT-2024-3306 · Kemp Technologies · Loadmaster

Name of the Vulnerable Software and Affected Versions: LoadMaster affected versions not specified Description: A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster...

PT-2024-11575 · Ibm · Ibm Security Verify Directory

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Directory version 10.0.0 Description: The issue could disclose sensitive server information, potentially leading to further attacks against the system. Recommendations: For IBM Security Verify Directory version 10.0.0, at...

PT-2024-22176 · Unknown · Wp Sendfox

Name of the Vulnerable Software and Affected Versions: WP SendFox versions 1.3.0 and earlier Description: A Missing Authorization issue has been identified. This issue affects the functionality of the software, potentially allowing unauthorized access. Recommendations: For WP SendFox versions 1.3...

PT-2024-2354 · Advantech · Advantech Webaccess/Scada

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess/SCADA affected versions not specified Description: The issue is related to a lack of protection against SQL query structure attacks, allowing a remote attacker to execute arbitrary SQL queries on the database. This can...

PT-2024-2553 · Rockwell Automation · Rockwell Automation Panelview Plus 7 +1

Name of the Vulnerable Software and Affected Versions: Rockwell Automation PanelView Plus 7 affected versions not specified Rockwell Automation FactoryTalk View Machine Edition affected versions not specified Description: A vulnerability exists in the affected product that allows a malicious user...

PT-2024-20617 · Jquery · Quicksand Post Filter Jquery Plugin

Name of the Vulnerable Software and Affected Versions: Quicksand Post Filter jQuery Plugin versions 3.1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Quicksand Post Filter jQuery Plugin. Recommendations: For Quicksand Post Filter jQuery Plugin...

PT-2024-2448 · Rockwell Automation · Powerflex 527

Name of the Vulnerable Software and Affected Versions: Rockwell Automation PowerFlex 527 affected versions not specified Description: A denial-of-service issue exists due to improper input validation in the device. If exploited, it can cause a disruption in the CIP communication, requiring a manu...

PT-2024-22637

Name of the Vulnerable Software and Affected Versions: Xbox Gaming Services affected versions not specified Description: The issue concerns an elevation of privilege vulnerability in Xbox Gaming Services, allowing for the gain of SYSTEM privileges. There have been public disclosures and discussio...

PT-2024-22179 · Fujifilm · Fujifilm Printers

Name of the Vulnerable Software and Affected Versions: FUJIFILM printers affected versions not specified Description: A cross-site request forgery issue allows a remote unauthenticated attacker to alter user information. If the targeted user is an administrator, settings such as the administrator...