PT-2024-29289 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateways affected versions not specified Description: An authenticated command injection issue exists in the Command Line Interface of the affected software. This allows for the execution of arbitrary...

PT-2024-40914

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned, use 'Software affected versions not specified'. Description The issue arises from the MemBio::get buf function calling slice::from raw parts with a null-pointer, violating its invariants and resultin...

PT-2024-41000 · Unknown · Fdo-Client

Name of the Vulnerable Software and Affected Versions: fdo-client affected versions not specified Description: The issue concerns the removal of a build key via utils/keys gen.sh. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-37794 · Uberagent · Uberagent

Name of the Vulnerable Software and Affected Versions: uberAgent affected versions not specified Description: The issue concerns a privilege escalation in uberAgent. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2024-40933 · Unknown · Opentelemetry Api

Name of the Vulnerable Software and Affected Versions: opentelemetry api affected versions not specified Description: The opentelemetry api has been moved into the opentelemetry crate. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-24987 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue allows an authenticated user to recover another user's credentials under certain circumstances. Recommendations: At the moment, there is n...

PT-2024-28474 · Telsat · Telsat Markoni Fm Transmitters

Name of the Vulnerable Software and Affected Versions: TELSAT marKoni FM Transmitters affected versions not specified Description: The issue is related to a command injection vulnerability that can be exploited through the manipulation of settings, potentially allowing an attacker to gain...

PT-2024-27036 · Unknown · Boottime Module

Name of the Vulnerable Software and Affected Versions: boottime module affected versions not specified Description: The issue is related to a memory management vulnerability in the boottime module. Successful exploitation of this vulnerability can affect integrity. Recommendations: At the moment,...

PT-2024-21680 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns a Local Privilege Escalation vulnerability, allowing an attacker to remotely compromise Toshiba printers. Recommendations: At the moment, there is no information...

PT-2024-36394 · Unknown · Calendar Module

Name of the Vulnerable Software and Affected Versions: Calendar module affected versions not specified Description: The issue concerns function vulnerabilities in the Calendar module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there is ...

PT-2024-13962 · Lexmark · Lexmark Cx331Adwe

Name of the Vulnerable Software and Affected Versions: Lexmark CX331adwe affected versions not specified Description: A method to override the firmware downgrade protection has been identified in some Lexmark products. This issue allows for a bypass of the downgrade protection feature that was...

PT-2024-40176 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: Software affected versions not specified Description: A security issue has been found where session data of authenticated frontend users is not properly cleared during the logout process. As a...

PT-2024-11773 · Huawei · Huawei Smart Speakers

Name of the Vulnerable Software and Affected Versions: Huawei smart speakers affected versions not specified Description: The issue is related to a memory overflow, which may cause certain functions to fail upon successful exploitation. Recommendations: At the moment, there is no information abou...

PT-2024-40449 · Unknown · Silverstripe

Name of the Vulnerable Software and Affected Versions: Silverstripe affected versions not specified Description: The issue is related to an incorrectly encoded URL, which is a minor unresolved fix following a previous security release. Recommendations: At the moment, there is no information about...

PT-2024-40470 · Orocrm · Orocrm

Name of the Vulnerable Software and Affected Versions: OroCRM affected versions not specified Description: The issue allows attackers to redirect users to an external website due to open redirection. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2024-40069 · Prism +1 · Prism +1

Name of the Vulnerable Software and Affected Versions: codehighlight extension affected versions not specified Description: The issue concerns a vulnerable version of the 3rd party JavaScript component prism bundled with the codehighlight extension, which is susceptible to Regular expression Deni...

PT-2024-4561 · Cisco · Cisco Asyncos

Name of the Vulnerable Software and Affected Versions: Cisco AsyncOS Software for Cisco Secure Email Gateway affected versions not specified Description: The issue is related to insufficient validation of user input in the web-based management interface, allowing an authenticated, remote attacker...

PT-2024-12630 · Hcl · Hcl Dryice Lucy

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE Lucy now AEX affected versions not specified Description: The issue is related to a Cross Origin Resource Sharing CORS misconfiguration in the mobile app, which could allow unauthorized access to application resources from any web...

PT-2024-12981 · Motorola · Motorola Phone Calls

Name of the Vulnerable Software and Affected Versions: Motorola Phone Calls affected versions not specified Description: An improper export issue in the Motorola Phone Calls application could allow a local attacker to read unauthorized information. Recommendations: At the moment, there is no...

PT-2024-30244

Name of the Vulnerable Software and Affected Versions HGiga iSherlock versions affected versions not specified MailSherlock versions affected versions not specified SpamSherock versions affected versions not specified AuditSherlock versions affected versions not specified Description The system...