PT-2024-12390 · Qualcomm · Snapdragon +97

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure in Audio when accessing AVCS services from ADSP payload. No further details are provided about the nature of t...

PT-2024-7253

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to a Heap-based Overflow vulnerability in the ODXSW DLL.dll library of Autodesk applications, specifically when parsing maliciously crafted SLDPRT files. This ca...

PT-2024-18496 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: The issue is related to an incorrect error handling in the alac decoder, which could lead to a possible out of bounds write. This could result in remote escalation of privilege with no...

PT-2024-40412 · Crates.Io · Ckb

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The p2p discovery protocol has an issue where it assumes that the peer IP must be a valid IPv4 address. Recommendations: At the moment, there is no information about a newer version tha...

PT-2024-13902 · Ibm · Ibm Powersc

Name of the Vulnerable Software and Affected Versions: IBM PowerSC affected versions not specified Description: The issue concerns cross-origin resource sharing in IBM PowerSC. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-7395

Name of the Vulnerable Software and Affected Versions: Windows Remote Registry client affected versions not specified Description: The issue is related to the Windows Remote Registry client, where an elevation of privilege vulnerability exists due to the use of outdated transport protocols,...

PT-2024-40817 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions mrb memsearch, str convert range, and...

PT-2024-40814 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow READ 8 crash. The crash state involves functions such as mrb memsearch, mrb str split m, and mrb vm exec. ...

PT-2024-15532 · Unknown · Mholt/Archiver

Name of the Vulnerable Software and Affected Versions: mholt/archiver affected versions not specified Description: A flaw was discovered in the mholt/archiver package, allowing an attacker to create a specially crafted tar file. When unpacked, this file may allow access to restricted files or...

PT-2024-40811 · Git +1 · S2Opc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a global buffer overflow read of 8 bytes. The crash occurs in the ReadVariantArrayBuiltInType function, which is called by SOPC...

PT-2024-20215 · Unknown · Home Spot Cube2

Name of the Vulnerable Software and Affected Versions: HOME SPOT CUBE2 versions V102 and earlier Description: A heap-based buffer overflow issue exists, allowing arbitrary code execution by processing invalid values. The affected products are no longer supported. Recommendations: For HOME SPOT...

PT-2024-4384

Name of the Vulnerable Software and Affected Versions Salt affected versions not specified Description The issue is related to a directory traversal attack in the Salt project, specifically in the Syndic cache directory creation. This could allow a malicious attacker to create an arbitrary...

PT-2024-16708 · Unknown · Jberet-Core

Name of the Vulnerable Software and Affected Versions: jberet-core affected versions not specified Description: A vulnerability was found in jberet-core logging. An exception in dbProperties might display user credentials such as the username and password for the database-connection...

PT-2024-1615

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Service Platform affected versions not specified Description The issue is related to incorrect cryptographic signature verification in the FactoryTalk Services Platform, which can allow a remote attacker to gain...

PT-2024-6308 · Xen +2 · Xen +2

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to the incorrect placement of a preprocessor directive in the source code, which results in logic that doesn't operate as intended when support for HVM guests is compiled o...

PT-2024-13308 · Hashicorp · Hashicorp Consul

Name of the Vulnerable Software and Affected Versions: Consul affected versions not specified Description: The issue concerns Consul. There is no detailed information provided about the nature of the problem or its potential impact. Recommendations: At the moment, there is no information about a...

PT-2024-13305 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A previously reported issue was withdrawn by its CNA after further investigation showed it was not a security issue. Recommendations: At the moment, there is no information...

PT-2024-1806 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! affected versions not specified Description: The issue is related to inadequate escaping of mail addresses, which leads to XSS vulnerabilities in various components. This could allow a remote attacker to execute arbitrary code by...

PT-2024-19626 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A security issue has been identified, but details are not provided in the given information. No estimated number of potentially affected devices...

PT-2024-15997 · Shanxi Diankeyun Technology · Noderp

Name of the Vulnerable Software and Affected Versions: Shanxi Diankeyun Technology NODERP versions up to 6.0.2 Description: A critical issue has been found in the software, affecting unknown code of the file /runtime/log. This allows for files or directories to be made accessible. The attack can ...