PT-2024-18606 · Unknown · Foxmann-Un/Unem Server / Api Gateway

Name of the Vulnerable Software and Affected Versions: FOXMAN-UN/UNEM server / API Gateway affected versions not specified Description: A security issue exists in the FOXMAN-UN/UNEM server / API Gateway, allowing an attacker to execute unintended commands or code on the UNEM server if exploited...

PT-2024-6427 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2024-40787 · Unknown · Javaparser

Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: The issue is related to a security exception in the CommentsInserter class. The crash occurs in the insertComments function, which is part of the JavaParser library. The error is also...

PT-2024-23084

Name of the Vulnerable Software and Affected Versions Veeam Backup Enterprise Manager affected versions not specified Description The issue allows account takeover via NTLM relay. There is no information provided about the estimated number of potentially affected devices worldwide or details abou...

PT-2024-40059 · Typo3 · Typo3 Neos

Name of the Vulnerable Software and Affected Versions: TYPO3 Neos affected versions not specified Description: A privilege escalation issue has been discovered, allowing logged-in editors to access, create, and modify content nodes that exist in the workspace of other editors. Recommendations: At...

PT-2024-14709 · Unknown · Pms Module

Name of the Vulnerable Software and Affected Versions: PMS module affected versions not specified Description: The issue is a privilege escalation vulnerability in the PMS module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the moment, the...

PT-2024-25043 · Unknown · Account Module

Name of the Vulnerable Software and Affected Versions: Account module affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the account module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the...

PT-2024-13103 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue involves memory corruption in HLOS during storage type checks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

PT-2024-40744 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

PT-2024-14797 · Honeywell · Honeywell

Name of the Vulnerable Software and Affected Versions: Honeywell affected versions not specified Description: The issue arises when a server receives a malformed message to create a new connection, potentially allowing an attacker to perform remote code execution or cause a failure...

PT-2024-2812 · Microsoft · Azure Ai Search

Name of the Vulnerable Software and Affected Versions: Azure AI Search affected versions not specified Description: The issue is related to the use of pre-installed credentials in Azure AI Search, which can be exploited to disclose protected information. Recommendations: At the moment, there is n...

PT-2024-3180 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to an integer overflow in the Microsoft ODBC Driver for SQL Server. It may allow a remote attacker to execute arbitrary code...

PT-2024-14542 · Unknown · Ril Service

Name of the Vulnerable Software and Affected Versions: ril service affected versions not specified Description: The issue is related to a possible out of bounds write in the ril service due to a missing bounds check. This could lead to local denial of service and requires System execution...

PT-2024-14608 · Unknown · Faceid Service

Name of the Vulnerable Software and Affected Versions: faceid service affected versions not specified Description: The issue is related to a possible out of bounds read in the faceid service due to a missing bounds check. This could lead to a local denial of service and requires System execution...

PT-2024-40906 · Unknown · Catppuccin

Name of the Vulnerable Software and Affected Versions: Catppuccin affected versions not specified Description: The issue concerns a deprecated tool, with users recommended to use Catppuccin's new tool, whiskers, instead. Recommendations: At the moment, there is no information about a newer versio...

PT-2024-40683 · Libspdm · Libspdm

Name of the Vulnerable Software and Affected Versions: libspdm affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the libspdm copy mem function and the libspdm get response chunk send function. No information...

PT-2024-14030 · Ibm · Ibm Qradar

Name of the Vulnerable Software and Affected Versions: IBM QRadar affected versions not specified Description: A cross-site scripting issue has been identified. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-7492 · Unknown · Platypus.Js

Name of the Vulnerable Software and Affected Versions: Platypus.js affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access in the Platypus.js platform. Exploitation may allow a remote attacker to access confidential...

PT-2024-20213 · Delta Electronics +1 · Diaenergie

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: A SQL injection issue exists in the GetDIAE slogListParameters, allowing for potential exploitation. No information is provided about the estimated number of potentially affected devices...

PT-2024-2816 · Unknown · Netcat Cms

Name of the Vulnerable Software and Affected Versions: Netcat CMS affected versions not specified Description: The issue is related to a cross-site request forgery vulnerability. Exploitation of this issue may allow a remote attacker to inject PHP code. Recommendations: At the moment, there is no...