PT-2024-4515 · Uriparser +6 · Uriparser +6

Name of the Vulnerable Software and Affected Versions: uriparser versions 0.9.7 and earlier Description: An issue in the ComposeQueryEngine function of UriQuery.c in uriparser is related to an integer overflow, which can occur via long keys or values and result in a buffer overflow. This can...

PT-2024-3096 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version V4.0.3c.7646 B20201211 Description: The issue exists due to inadequate protection of the web page structure in the setWiFiExtenderConfig function of the TOTOLINK EX200 router's firmware. This allows a remote attacker to...

PT-2024-22683 · Memos · Memos

Name of the Vulnerable Software and Affected Versions: memos versions 0.13.2 through 0.21.x Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. It exists at the /api/resource endpoint, allowing authenticated users to enumerate the internal network...

CVE-2023-5404

Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5407

Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5405

CVE-2023-5405 affects Honeywell Experion PKS/LX/PlantCruise by Experion and Safety Manager/Safety Manager SC. A memory information leak in the CDA Server process occurs when an error response is generated to a specially crafted message, with the root cause described in the advisory as an out-of-b...

CVE-2023-5404

CVE-2023-5404 affects Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, and Safety Manager SC. Root cause: heap-based or out-of-bounds memory write triggered by processing a malformed message, potentially enabling remote code execution or service failure over the netwo...

CVE-2023-5403

Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5400

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-5397

Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning...

PT-2024-23709 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Client Management System version 1.1 Description: The issue allows attackers to execute arbitrary code and obtain sensitive information via the "Search bar" in the /search-invoices.php endpoint. This is a Cross Site Scripting...

PT-2024-24493 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is a stack overflow vulnerability that can be exploited via the PPW parameter in the fromWizardHandle function. This vulnerability may allow attackers to execute arbitrary code on the...

PT-2024-24823 · Wondercms · Wondercms

Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: A cross-site scripting XSS vulnerability in the Settings section allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE DESCRIPTION parameter under the CURRE...

PT-2024-3529 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 7.0.0.0.0 through 12.2.1.4.0 Description: The issue is related to insufficient access control in the Analytics Web Answers component. It allows a low-privileged attacker with network...

PT-2024-3524 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description: The issue is related to the RDBMS component of Oracle Database Server, allowing a high-privileged attacker with authenticated...

PT-2024-3441 · Oracle · Oracle Complex Maintenance +1

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product, part of...

PT-2024-3531 · Oracle · Peoplesoft Enterprise Hcm Benefits Administration

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Benefits Administration version 9.2 Description: The issue is related to insufficient input validation in the Benefits Administration component. It allows a low-privileged attacker with logon access to the...

PT-2024-3945 · Oracle +12 · Mysql Server +11

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: A difficult to exploit vulnerability in the MySQL Server product allows an unauthenticated attacker with logon to the infrastructure where MySQL Server...

PT-2024-18162 · Unknown · Parisneo/Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui affected versions not specified Description: An SQL injection issue exists in the delete discussion function, allowing an attacker to delete all discussions and message data by sending a crafted HTTP POST request to the...

PT-2024-3034 · Unknown +1 · Kv Replay Viewer +2

Name of the Vulnerable Software and Affected Versions: KV STUDIO versions 11.64 and earlier KV REPLAY VIEWER versions 2.64 and earlier VT5-WX15/WX12 versions 6.02 and earlier Description: An out-of-bounds read issue exists, which may lead to information disclosure or arbitrary code execution by...