Intel Ethernet Adapter Driver Pack Software Installer Advisory - Lenovo Support US

No description provided...

Important: kernel

Issue Overview: A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28887 Description: Uncontrolled...

PT-2024-30314 · Woocommerce · Sender

Name of the Vulnerable Software and Affected Versions: Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce versions n/a through 2.6.14 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This...

PT-2024-38485 · Gila Cms · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS version 1.10.9 Description: A problematic issue was found in Gila CMS, affecting an unknown part of the file /cm/update rows/page?id=2 within the HTTP POST Request Handler component. The manipulation of the content argument leads to...

PT-2024-7415 · Siemens · Siemens Sinec Security Monitor

Name of the Vulnerable Software and Affected Versions: Siemens SINEC Security Monitor versions prior to V4.9.0 Description: The issue is related to the incorrect processing of user input data in the ssmctl-client command, which could allow a remote attacker to execute arbitrary code with root...

PT-2024-28859 · Sourcecodester · Sourcecodester Daily Calories Monitoring Tool

Name of the Vulnerable Software and Affected Versions: Sourcecodester Daily Calories Monitoring Tool version 1.0 Description: The issue is related to SQL Injection via the "delete-calorie.php" file. This allows for potential data compromise. There is no information provided about the estimated...

PT-2024-6101 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix versions 6.0.30 through 6.0.30, 6.4.15, and 7.0.0 Description: The issue is related to the ability to directly modify memory pointers in the JavaScript engine within Zabbix. This could allow a remote attacker to execute arbitrary code...

PT-2024-29964 · Openhab +1 · Openhab +1

Name of the Vulnerable Software and Affected Versions: openHAB CometVisu add-on versions prior to 4.2.1 Description: The CometVisuServlet in openHAB's CometVisu add-on is susceptible to an unauthenticated path traversal vulnerability. This issue allows local files on the server to be requested vi...

CVE-2024-7490

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwipdhcpfindoption. This issue affect...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Summary: As of July 10, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this...

PT-2024-38434 · Tenda · Tenda I22

Name of the Vulnerable Software and Affected Versions: Tenda i22 version 1.0.0.34687 Description: A critical issue was found in the function formApPortalAccessCodeAuth of the file /goform/apPortalAccessCodeAuth. The manipulation of the argument accessCode/data/acceInfo leads to a buffer overflow...

PT-2024-29328 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/view students.php endpoint, allowing remote unauthenticated attackers to view student details. This issue affects the ability to control...

[SECURITY] [DSA 5738-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5738-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 06, 2024 https://www.debian.org/security/faq -...

PT-2024-25590 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This could lead to the retrieval of all information stored in the phonenumber...

PT-2024-25589 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This could enable the retrieval of all information stored in the id variable i...

PT-2024-29629 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions up to 10.10.2.2 Description: A flaw was discovered in the firmware that does not properly neutralize input during web page generation. Recommendations: For versions up to 10.10.2.2, update to a version later than...

PT-2024-19878 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 4.2.0.190 Description: The issue allows anti-tampering to be disabled under certain conditions without signature validation. It is being actively exploited in the wild, and users should check their...

Important: httpd

Issue Overview: A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosu...

PT-2024-28662 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks against...