PT-2024-19076 · Brother Industries · Brother

Name of the Vulnerable Software and Affected Versions: Brother products affected versions not specified Description: An improper authentication vulnerability exists in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD. This vulnerability can be...

PT-2024-21227 · Peprodev · Peprodev Ultimate Invoice

Name of the Vulnerable Software and Affected Versions: PeproDev Ultimate Invoice versions 1.9.7 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not...

PT-2024-12861 · A.K.I · Pmailserver +1

Name of the Vulnerable Software and Affected Versions: A.K.I Software's PMailServer/PMailServer2 products affected versions not specified Description: A directory traversal vulnerability exists in the Mailing List Search CGI pmmls.exe included in the products. This vulnerability can be exploited ...

PT-2024-20612 · Unknown · Sewpafly Post Thumbnail Editor

Name of the Vulnerable Software and Affected Versions: Sewpafly Post Thumbnail Editor versions through 2.4.8 Description: The issue is related to Exposure of Sensitive Information to an Unauthorized Actor. This allows unauthorized access to sensitive information. Recommendations: For versions...

PT-2024-40663 · Pcre2 · Pcre2

Name of the Vulnerable Software and Affected Versions: PCRE2 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash type is Heap-buffer-overflow READ 4, and it occurs in the pcre2 fuzzsupport.c file. Recommendations: At the moment, there is n...

PT-2024-15180 · Unknown · Sciener Locks

Name of the Vulnerable Software and Affected Versions: Sciener locks affected versions not specified Description: The firmware update mechanism of the locks does not authenticate or validate firmware updates when they are passed through the Bluetooth Low Energy service. An attacker can send a...

PT-2024-15462 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-10560 · Wago · 750-352 Firmware +13

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker could send specifically crafted packets to an affected device. If an authenticated user then views that data in a...

PT-2024-20303 · Telefonica · Movistar 4G Router

Name of the Vulnerable Software and Affected Versions: Movistar 4G router version ES WLD71-T1 v2.0.201820 Description: The issue is a Cross-Site Request Forgery vulnerability that allows an attacker to force an end user to execute unwanted actions in a web application where they are currently...

PT-2024-2575 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Secure Copy Protocol SCP and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system...

PT-2024-2311 · Palo Alto Networks · Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app for Windows affected versions not specified Description: A privilege escalation vulnerability in the GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges...

PT-2024-2146 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset,...

PT-2024-2078 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows kernel, allowing an attacker to bypass security restrictions and elevate their privileges. This can affect the system,...

PT-2024-2305 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. This vulnerability could be exploited by an attacker to inject malicious scripts into vulnerable form...

PT-2024-2160 · Unknown · Open Management Infrastructure

Name of the Vulnerable Software and Affected Versions: Open Management Infrastructure OMI affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Open Management Infrastructure OMI, which is associated with inadequate access control...

PT-2024-5167

Name of the Vulnerable Software and Affected Versions: perl-Crypt-OpenSSL-RSA affected versions not specified Description: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attac...

PT-2024-2245 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system kernel. It allows attackers to obtain sensitive information and potentially affect th...

PT-2024-2039 · Schneider Electric · Schneider Electric Easergy T200

Name of the Vulnerable Software and Affected Versions: Schneider Electric Easergy T200 affected versions not specified Description: A Files or Directories Accessible to External Parties issue exists, potentially allowing unauthenticated files and logs exfiltration and download of files when an...

PT-2024-2288 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled search path element in the Windows OLE mechanism. It allows a remote attacker to execute arbitrary code. There is no information about the estimated...

PT-2024-2818 · Unknown · Netcat Cms

Name of the Vulnerable Software and Affected Versions: Netcat CMS affected versions not specified Description: The issue is related to a cross-site request forgery vulnerability. Exploitation of this issue may allow a remote attacker to elevate privileges and execute arbitrary code...