PT-2024-21756 · Google · Android

Name of the Vulnerable Software and Affected Versions: LPP LcsManagement.c affected versions not specified Description: The issue is related to a possible out of bounds read in the EUTRAN LCS DecodeFacilityInformationElement function of LPP LcsManagement.c due to a missing bounds check. This coul...

PT-2024-18433 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: freescout-helpdesk/freescout affected versions not specified Description: The issue is related to the unrestricted upload of files with dangerous types. This could potentially allow an attacker to upload malicious files, leading to various...

PT-2024-18392 · Lg · Webos

Name of the Vulnerable Software and Affected Versions: LG Signage webOS affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on the affected webOS of LG Signage. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-18393 · Lg · Webos

Name of the Vulnerable Software and Affected Versions: webOS of LG Signage affected versions not specified Description: This issue allows remote attackers to traverse the directory on the affected webOS of LG Signage. Recommendations: At the moment, there is no information about a newer version...

PT-2024-2880 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows affected versions not specified Description: The issue is related to improper access control in the IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to potentiall...

jenkins-plugins: blueocean: CSRF vulnerability in Blue Ocean Plugin allows capturing credentials

A flaw was found in the blueocean Jenkins plugin. Affected versions of this plugin allow attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job...

PT-2024-40903 · Unknown · Generational-Arena

Name of the Vulnerable Software and Affected Versions: generational-arena affected versions not specified Description: The generational-arena crate's repository has been archived and is no longer maintained. Recommendations: At the moment, there is no information about a newer version that contai...

Veeam Recovery Orchestrator Security Breach

Veeam Recovery Orchestrator is a Veeam company that provides comprehensive reporting, automated testing, and at-a-glance compliance dashboards. A security vulnerability exists in Veeam Recovery Orchestrator. An attacker exploiting the vulnerability could retrieve plans from a range other than the...

PT-2024-12384 · Unknown · Multi-Mode Call Processor

Name of the Vulnerable Software and Affected Versions: Multi-Mode Call Processor affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Multi-Mode Call Processor. This occurs due to a UE failure caused by heap leakage. Recommendations: At the...

New machines are created in default OU rather than OU specified during catalog creation

MCS machines created from DaaS studio are getting created in default computer OU, rather than the OU selected during catalog creation...

CSRF vulnerability in Jenkins GitLab Branch Source Plugin

Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier does not require POST requests for a form validation endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to connect to an attacker-specified URL. GitLab Branch Source Plugin...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2024-23902

A cross-site request forgery CSRF vulnerability in Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2024-23902

A cross-site request forgery CSRF vulnerability in Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2024-23902

A cross-site request forgery CSRF vulnerability in Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL...

PT-2024-1146 · Microsoft · Windows Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: The issue is related to weaknesses in the access control mechanism of the Windows Message Queuing system, which can be exploited by a remote attacker to disclose protected...

PT-2024-1084 · Microsoft · Azure Storage Mover

Name of the Vulnerable Software and Affected Versions: Azure Storage Mover affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer versio...

PT-2024-1182 · Bosch · Bosch Nexo Cordless Nutrunner +2

Name of the Vulnerable Software and Affected Versions: Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified Description: The issue is related to a buffer overflow in the stack of the NEXO-OS operating system, which can be exploited by an...

PT-2024-13915 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is an Open Redirect vulnerability that could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threat...

PT-2023-31830 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a buffer overflow, which could lead to code execution if successfully exploited. Recommendations: At the moment, there is no information about a newer version...