PT-2024-17909 · Softiron · Softiron Hypercloud

Name of the Vulnerable Software and Affected Versions: SoftIron HyperCloud versions 2.3.0 through 2.4.x Description: An issue exists where authenticated, but non-admin users can create data pools, potentially impacting the performance and availability of the backend software-defined storage...

PT-2024-37048

Name of the Vulnerable Software and Affected Versions GNU GRUB aka GRUB2 versions 2.12 and earlier Description The issue is related to the use of a non-constant time algorithm for grub crypto memcmp, which allows side-channel attacks. This means that an attacker could potentially exploit the...

PT-2024-17882 · Unknown · Phpgurukul Maid Hiring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A problem has been found in the code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the searchdata argument leads to cross site...

PT-2024-17861 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /admin/index.php. The manipulation of the email argument leads to SQL injection. It is possible to launch...

PT-2024-34399 · Unknown · Smart Agent

Name of the Vulnerable Software and Affected Versions: Smart Agent version 1.1.0 Description: The issue allows a remote attacker to execute arbitrary code via the id parameter in the "/sendPushManually.php" component. This is a SQL injection vulnerability that can be exploited to run arbitrary...

PT-2024-17845 · Unknown · Phpgurukul Blood Bank & Donor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Blood Bank & Donor Management System version 2.4 Description: A problem has been found in the system, affecting some unknown functionality of the file /bbdms/admin/update-contactinfo.php. The manipulation of the Address argument...

PT-2024-36417 · Unknown · Dcat-Admin

Name of the Vulnerable Software and Affected Versions: Dcat-Admin versions 2.2.0-beta through 2.2.2-beta Description: The issue is a Cross-Site Scripting XSS vulnerability. It can be exploited via the "/admin/auth/menu" and "/admin/auth/extensions" API endpoints. Recommendations: For versions...

The vulnerability of the corporate version of the GitHub Enterprise Server, related to incorrect restrictions on the path to the restricted catalog, allows attackers to gain read access to arbitrary files.

The vulnerability of the corporate version of the GitHub Enterprise Server is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain read access to arbitrary files by adding specially...

PT-2024-36964 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.74 Description: The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. The problem arises when the nf tables chain destroy function is used from call...

PT-2025-3469 · Cmsimple · Cmsimple

Name of the Vulnerable Software and Affected Versions: CMSimple version 5.16 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation may allow a remote attacker to gain unauthorized access to protected information by sending a specially...

PT-2024-41133 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

PT-2024-17822 · Code Projects · Code-Projects Travel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Travel Management System version 1.0 Description: A critical issue affects the processing of the file /subcat.php, where the manipulation of the catid argument leads to sql injection. The attack can be initiated remotely. The...

PT-2024-17808 · Unknown · Code-Projects Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: code-projects Simple Admin Panel version 1.0 Description: A critical vulnerability has been found in the file updateOrderStatus.php, affecting an unknown functionality. The manipulation of the record argument leads to SQL injection. The attac...

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) server lies in the incorrect path limitation for the restricted access directory. This allows a malicious actor to perform service denial-of-service attacks, read from or write to a limited number of files.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to perform maintenance actions, read from or write to a limited number of...

PT-2024-10245

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to...

PT-2024-10246 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server version 8.4.0 Description: The issue is related to the Server: Optimizer component of Oracle MySQL Server and is caused by inadequate authorization procedure due to incorrect input validatio...

PT-2024-10251 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: A vulnerability in the MySQL Server product allows a high-privileged attacker with network access via multiple...

PT-2024-10261 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to an unbounded resource allocation in the MySQL Server product, specifically in the Server:...

PT-2024-10248 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to the InnoDB component of Oracle MySQL Server and is caused by inadequate authorization...

The vulnerability of the AWS S3 platform’s module for developer portals allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the AWS S3 platform’s module for developer portals developed by Backstage relates to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...