PT-2024-20827 · Unknown · Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Online Medicine Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/omos/?p=products/view product" API endpoint. Recommendations: Fo...

PT-2024-20816 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a cross-site scripting XSS vulnerability in the Add Resident function at "/barangay-population-monitoring-system/masterlist.php". This issue allows attackers t...

PT-2024-20871 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: Redaxo version 5.15.1 Description: A remote code execution RCE issue was discovered in Redaxo via the component "/pages/templates.php". This allows for potential code execution by an attacker. Recommendations: For Redaxo version 5.15.1, as a...

PT-2024-20825 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: A SQL injection vulnerability was discovered in Employee Managment System via the pwd parameter at the "/aprocess.php" API endpoint. Recommendations: For Employee Managment System version 1.0...

PT-2024-1749

Name of the Vulnerable Software and Affected Versions ESET versions prior to the fixed version Description The issue is related to a local privilege escalation vulnerability that potentially allows an attacker to misuse ESET’s file operations to delete files without having proper permission. This...

Unauthorized Access

Mattermost Jira Plugin is vulnerable to unauthorized access. The vulnerability is due to its failure to check the security level of incoming issues or restrict based on the user, allowing registered Jira users to create webhooks granting access to all Jira issues...

CVE-2024-24740

SAP NetWeaver Application Server ABAP - versions KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.93, KERNEL 7.94, KRNL64UC 7.53, under certain conditions, allows an attacker to access information which could otherwise be restricted with low impact on confidentiality of t...

PT-2024-3272 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to deserialization weaknesses in the IntelR ThunderboltTM DCH drivers for Windows. It may allow an authenticated user to potentially enable a...

PT-2024-20097 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application where it incorrectly neutralizes special elements when creating a report, which could lead to command injection. Recommendations...

PT-2024-2223 · Intel · Intel Thunderbolt Controllers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM Controllers versions prior to 41 Description: The issue is related to improper access control in the firmware of some IntelR ThunderboltTM Controllers, which may allow a privileged user to enable denial of service via loc...

PT-2024-2881 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to improper buffer restrictions in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to potentially...

PT-2024-1668 · Microsoft · Skype For Business

Name of the Vulnerable Software and Affected Versions: Skype for Business affected versions not specified Description: The issue is related to insufficient protection of sensitive data due to incorrect access restriction, potentially allowing a remote attacker to gain unauthorized access to...

PT-2024-20529 · Typo3 Cms +1 · Typo3/Cms +1

Name of the Vulnerable Software and Affected Versions: sf event mgt versions prior to 7.4.0 Description: The existing access control check for events in the backend module of sf event mgt, an event management and registration extension for the TYPO3 CMS, got broken during the update to TYPO3 12.4...

PT-2024-17984 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.12 GitHub Enterprise Server version 3.11.5 GitHub Enterprise Server version 3.10.7 GitHub Enterprise Server version 3.9.10 GitHub Enterprise Server version 3.8.15 Description: A command injection...

PT-2024-3487 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: autogpt versions up to v0.5.0 Description: An OS command injection issue exists due to the improper neutralization of special elements used in an OS command. This allows for arbitrary code execution if an attacker can inject shell commands,...

PT-2024-17144 · Mapshaper · Mapshaper

Name of the Vulnerable Software and Affected Versions: mapshaper versions prior to 0.6.44 Description: The issue is related to a path traversal vulnerability, which may lead to information disclosure. An attacker can exploit this to potentially access sensitive information. The estimated number o...

Siemens Simcenter Femap

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Unrestricted File Upload

Apache Solr is vulnerable to Unrestricted File Upload. The vulnerability is due to the ConfigSets API accepting and uploading jar/class files without proper restriction of file type. When backing up Solr Collections, the configSet files will be saved to disk, but if the backup directory is includ...

PT-2024-15364 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is an OS Command Injection Vulnerability in the svc acldb dump utility of Dell Unity. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of...

PT-2024-13730 · Ellucian · Ellucian Banner

Name of the Vulnerable Software and Affected Versions: Ellucian Banner version 9.17 Description: The issue allows Insecure Direct Object Reference IDOR via a modified bannerId to the "/StudentSelfService/ssb/studentCard/retrieveData" endpoint. This means an attacker could potentially access...