PT-2024-18045 · Tainacan · Tainacan

Name of the Vulnerable Software and Affected Versions: Tainacan versions 0.20.6 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access to it...

PT-2024-18433 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: freescout-helpdesk/freescout affected versions not specified Description: The issue is related to the unrestricted upload of files with dangerous types. This could potentially allow an attacker to upload malicious files, leading to various...

PT-2024-21335 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successf...

PT-2024-21339 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successf...

PT-2024-21338 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successf...

PT-2024-21132 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: nanomq version 0.21.2 Description: The issue is a Use-After-Free vulnerability located in /nanomq/nng/src/core/socket.c. Recommendations: For nanomq version 0.21.2, at the moment, there is no information about a newer version that contains a...

PT-2024-1985 · Unknown · Gguf Library

Name of the Vulnerable Software and Affected Versions: GGUF library affected versions not specified Description: A heap-based buffer overflow vulnerability exists in the GGUF library's header.n kv functionality of llama.cpp. This issue can be triggered by a specially crafted .gguf file, potential...

PT-2024-17951 · Microsoft · Office 365

Name of the Vulnerable Software and Affected Versions: Office 365 affected versions not specified Description: The issue affects login functionality in a zero-trust environment. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

PT-2024-40637 · Git +1 · Gpac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by a crash report. The crash involves the BS ReadByte and gf bs read u8 functions, and...

PT-2024-3888 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager is susceptible to a Remote Code Execution Vulnerability. This issue allows an authenticated user to abuse the SolarWinds servic...

PT-2024-13942 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus affected versions not specified Description: A comprehensive exploration of the intricate vulnerabilities of ManageEngine ADAudit Plus has been conducted. Recommendations: At the moment, there is no information about...

PT-2024-40301 · Packagist · Typo3/Cms

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A security issue exists due to a too loose type check in an API method. This allows attackers to bypass the directory traversal check by providing an invalid UTF-8 encoding sequence...

PT-2024-5200 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to the getFilterString method in the NETGEAR ProSAFE Network Management System, which lacks proper validation of a user-supplied strin...

PT-2024-8051 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a use-after-free vulnerability in the atf dwg consumer.dll, rose x64 vc15.dll, and libodxdll libraries of Autodesk AutoCAD. This vulnerability can be...

PT-2024-20847 · Code Projects · Agro-School Management System

Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: The issue is related to Incorrect Access Control. Recommendations: For code-projects Agro-School Management System version 1.0, at the moment, there is no information about ...

PT-2024-7762

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to the opennurbs.dll library in Autodesk AutoCAD, which is vulnerable to an out-of-bounds read when parsing specially crafted 3DM files. This can allow an attack...

PT-2024-15533 · Hewlett Packard · Hp Laserjet Enterprise +1

Name of the Vulnerable Software and Affected Versions: HP Enterprise LaserJet and HP LaserJet Managed Printers affected versions not specified Description: The issue concerns information disclosure when connections made by the device back to services enabled by some solutions may have been truste...

PT-2024-20060 · Unisys · Unisys Stealth

Name of the Vulnerable Software and Affected Versions: Unisys Stealth version 5.3.062.0 Description: An issue in Unisys Stealth allows attackers to view sensitive information via the Enterprise ManagementInstaller msi.log file. Recommendations: For Unisys Stealth version 5.3.062.0, restrict acces...

PT-2024-1946 · Commend · Commend Ws203Vicm

Name of the Vulnerable Software and Affected Versions: Commend WS203VICM affected versions not specified Description: The issue is related to insufficient access control in the Commend WS203VICM IP station's firmware. A remote attacker may be able to bypass access control by creating a malicious...

PT-2024-14011 · Quic · Quic

Name of the Vulnerable Software and Affected Versions: QUIC in RFC 9000 affected versions not specified Description: The Latency Spin Bit specification in QUIC does not strictly constrain the bit value when the feature is disabled. This might allow remote attackers to construct a covert channel...