PT-2024-6114

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the Python interpreter could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying...

CVE-2026-33515 affecting package squid for versions less than 6.13-4

CVE-2026-33515 affecting package squid for versions less than 6.13-4. A patched version of the package is available...

PT-2024-31400 · Nixos · Hydra

Name of the Vulnerable Software and Affected Versions: Hydra affected versions not specified Description: Hydra is a Continuous Integration service for Nix-based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can...

CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-43794

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...

CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...

PT-2024-30652 · Open Edx +1 · Openedx-Atlas +4

Name of the Vulnerable Software and Affected Versions: openedx-translations affected versions not specified edx-platform versions from 'redwood' to 'master' Description: The openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Transifex...

SonicOS Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the SonicWall SonicOS management access and SSLVPN, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Gen 5 and Gen 6 devices, as well as Gen 7...

PT-2024-30064 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF in Pligg CMS. This occurs via the admin/admin page.php endpoint with specific parameters: link id and mode. The link id is set to 1 and the mode is...

PT-2024-20039 · Oppo · Coloros Internet Browser

Name of the Vulnerable Software and Affected Versions: ColorOS Internet Browser version 45.10.3.4.1 Description: The issue allows a remote attacker to execute arbitrary JavaScript code via the com.android.browser.RealBrowserActivity component. Recommendations: For version 45.10.3.4.1, consider...

CVE-2024-1975 affecting package dhcp for versions less than 4.4.3.P1-2

CVE-2024-1975 affecting package dhcp for versions less than 4.4.3.P1-2. A patched version of the package is available...

CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2

CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2. A patched version of the package is available...

CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2019-10638 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2019-10638 affecting package hyperv-daemons for versions less than 6.6.35.1-1. A patched version of the package is available...

CVE-2024-24859 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-24859 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2022-41722 affecting package golang for versions less than 1.22.7-2

CVE-2022-41722 affecting package golang for versions less than 1.22.7-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3

CVE-2024-6104 affecting package prometheus for versions less than 2.45.4-3. A patched version of the package is available...

CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it...