PT-2024-2826 · Mitsubishi · Melsec Iq-R Series Safety Cpu +1

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R Series Safety CPU R08/16/32/120SFCPU all versions MELSEC iQ-R Series SIL2 Process CPU R08/16/32/120PSFCPU all versions Description: The issue is related to an Incorrect Privilege Assignment vulnerability that allows a remote...

PT-2024-40903 · Unknown · Generational-Arena

Name of the Vulnerable Software and Affected Versions: generational-arena affected versions not specified Description: The generational-arena crate's repository has been archived and is no longer maintained. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2024-40882 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions mrb memsearch, str convert range, and...

PT-2024-14529 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this issue, the product implements a...

PT-2024-13276 · Ibm · Sametime

Name of the Vulnerable Software and Affected Versions: Sametime affected versions not specified Description: The issue is related to a failure to invalidate sessions in Sametime. Sensitive cookie values are set in a persistent manner in Sametime Web clients, allowing these values to remain valid...

PT-2024-14219 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this issue, the existing authentication...

PT-2024-19472 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. Although authentication is required to exploit this issue, the product implementation is...

CVE-2024-24816 Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the preview feature. All integrators that use these samples in the production code can be affected. The...

CVE-2024-24816 Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the preview feature. All integrators that use these samples in the production code can be affected. The...

PT-2024-40846 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, with the crash state...

PT-2024-20309 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A heap-buffer-overflow issue was discovered in Jsish. The issue is located in ./src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, at the moment, there is no information about a newer version that...

PT-2024-13106 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in WLAN Firmware. It occurs when the length of a received beacon is less than the length of an ieee802.11 beacon frame...

PT-2024-1768 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve...

PT-2024-13234 · Westermo · Lynx +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the autorefresh...

PT-2024-8052 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is caused by a maliciously crafted CATPART file that, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write. This can...

PT-2024-13056 · Westermo · Lynx +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the username parameter in the SNMP configuration...

PT-2024-19160 · Veeam · Veeam Recovery Orchestrator

Name of the Vulnerable Software and Affected Versions: Veeam Recovery Orchestrator affected versions not specified Description: The issue allows a user with a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service. Recommendations: At the...

PT-2024-3137 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Edge, allowing a remote attacker to bypass existing security restrictions. There is no...

PT-2024-12151 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a Signed to Unsigned Conversion Error. A local authenticated malicious user with admin privileges could potentially exploit this, leading to denial of service...

PT-2024-12856 · Westermo · Westermo Lynx

Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: An attacker with access to the Westermo Lynx web application could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the forward.0.domain parameter...