PT-2024-29357 · Unknown · Instantcms

Name of the Vulnerable Software and Affected Versions: InstantCMS affected versions not specified Description: The issue is related to Stored Cross Site Scripting XSS. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-29522 · Barix · Barix

Name of the Vulnerable Software and Affected Versions: Barix affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-30036 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System via the medium parameter at the "substaff.php" endpoint. This allows for potential exploitation. No...

PT-2024-29874 · Hargal · Hargal

Name of the Vulnerable Software and Affected Versions: Hargal affected versions not specified Description: The issue is related to improper access control, which is classified as CWE-284. This is a critical issue with a high severity score. No information is provided about the estimated number of...

PT-2024-30029 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...

PT-2024-24983 · Google · Nest

Name of the Vulnerable Software and Affected Versions: Nest production devices affected versions not specified Description: The issue concerns the libcurl CURLOPT SSL VERIFYPEER option being disabled on a subset of requests made by Nest production devices. This enabled a potential man-in-the-midd...

PT-2024-41066 · Мир Кт-51 · Мир Кт-51

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 affected versions not specified Description: The issue is related to information disclosure during data transmission. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment, there is no informatio...

PT-2024-40855 · Jq · Jq

Name of the Vulnerable Software and Affected Versions: jq affected versions not specified Description: The issue is related to a heap buffer overflow read, which occurs in the jq software. The crash state indicates that the functions jv parse, f tonumber, and jq next are involved in the issue...

PT-2024-29539 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP affected versions not specified Description: Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note that software versions which have reached End of Technical Support EoTS are not...

PT-2024-11523 · Unknown +1 · Apcb Firmware +1

Name of the Vulnerable Software and Affected Versions: APCB firmware affected versions not specified Description: The issue is related to improper bounds checking in the APCB firmware, which may allow an attacker to perform an out of bounds write, corrupting the APCB entry. This could potentially...

PT-2024-5549 · Aveva · Aveva Suitelink Server +5

Name of the Vulnerable Software and Affected Versions: AVEVA SuiteLink Server affected versions not specified Description: The issue is related to unlimited resource allocation in the SuiteLink server of AVEVA software products, including Historian, InTouch, Application Server, Communication...

PT-2024-6832 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to unrestricted file upload of dangerous types. An authenticated attacker can upload malicious code over the network, which...

PT-2024-5835 · Pimax · Pimax

Name of the Vulnerable Software and Affected Versions: Pimax products affected versions not specified Description: The issue concerns the implementation of the WebSocket protocol in Pimax applications for launching and managing Pimax Play games and PiTool software for configuring and calibrating ...

PT-2024-25068 · Qualcomm · Snapdragon +138

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when creating a fence to wait on timeline events and simultaneously signaling timeline events...

PT-2024-29289 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateways affected versions not specified Description: An authenticated command injection issue exists in the Command Line Interface of the affected software. This allows for the execution of arbitrary...

PT-2024-41000 · Unknown · Fdo-Client

Name of the Vulnerable Software and Affected Versions: fdo-client affected versions not specified Description: The issue concerns the removal of a build key via utils/keys gen.sh. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-37794 · Uberagent · Uberagent

Name of the Vulnerable Software and Affected Versions: uberAgent affected versions not specified Description: The issue concerns a privilege escalation in uberAgent. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2024-40901 · Pypi · Cipherbcrypt

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves a malicious package that exfiltrates secrets to a target server. No further details are provided about the nature of the issue or its potential impact. Recommendation...

PT-2024-40933 · Unknown · Opentelemetry Api

Name of the Vulnerable Software and Affected Versions: opentelemetry api affected versions not specified Description: The opentelemetry api has been moved into the opentelemetry crate. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-24987 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue allows an authenticated user to recover another user's credentials under certain circumstances. Recommendations: At the moment, there is n...