PT-2024-31632 · Unknown · Cust Module

Name of the Vulnerable Software and Affected Versions: cust module affected versions not specified Description: A directory traversal vulnerability is present in the cust module. Successful exploitation of this vulnerability will affect availability and confidentiality. Recommendations: At the...

PT-2024-30026 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the password parameter at the "login.php" endpoint. There is no information provided about the estimate...

PT-2024-13422 · Cisco · Cisco Radius Authentication

Name of the Vulnerable Software and Affected Versions: Cisco Radius Authentication affected versions not specified Description: The issue concerns Cisco Radius Authentication. No specific details about the issue are available due to the rejection of the candidate number. There is no information...

PT-2024-5696 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to a use-after-free vulnerability in the WinSock driver of Windows operating systems. This could allow an attacker to elevate thei...

PT-2024-25060 · Qualcomm · 315 5G Iot Modem Firmware +297

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing ESP IE from beacon/probe response frames. No information is provided...

PT-2024-11759 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a remote code execution vulnerability. No specific details about affected devices, real-world incidents, or technical exploitation details are provided...

PT-2024-20562 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Parsing a corrupt or malicious image with invalid color indices can cause a panic. There is no information provided about the estimated number of...

PT-2024-28268 · Wavlink · Wavlink Wn551K1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 affected versions not specified Description: The issue allows attackers to obtain sensitive router information through the 'live check.shtml' endpoint. Recommendations: At the moment, there is no information about a newer...

PT-2024-21685 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. Recommendations: At the moment, there is no information abou...

PT-2024-18615 · Unknown · Foxmann-Un/Unem Server

Name of the Vulnerable Software and Affected Versions: FOXMAN-UN/UNEM server affected versions not specified Description: An authentication bypass issue exists in the FOXMAN-UN/UNEM server API Gateway component. This allows attackers without any access to interact with the services and the...

PT-2024-40003 · Fluid · Fluid

Name of the Vulnerable Software and Affected Versions: Fluid affected versions not specified Description: The issue arises from the failure to properly encode user input in templates that utilize built-in Fluid ViewHelpers, making them susceptible to cross-site scripting. Recommendations: At the...

PT-2024-40056 · Unknown · Oroplatform

Name of the Vulnerable Software and Affected Versions: OroPlatform affected versions not specified Description: The issue allows attackers to redirect users to an external website due to open redirection. Recommendations: At the moment, there is no information about a newer version that contains ...

PT-2024-40116 · Prism +1 · Prism +1

Name of the Vulnerable Software and Affected Versions: codehighlight extension affected versions not specified Description: The issue concerns a vulnerable version of the 3rd party JavaScript component prism bundled with the codehighlight extension, which is susceptible to Regular expression Deni...

PT-2024-14574 · Unknown · Rsmc Module

Name of the Vulnerable Software and Affected Versions: RSMC module affected versions not specified Description: The issue is a double-free vulnerability in the RSMC module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there is no...

PT-2024-40699 · Matio · Matio

Name of the Vulnerable Software and Affected Versions: Matio affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

PT-2024-40692 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the functions ngx device forward finalize and ngx device finalize, and gs gc...

PT-2024-14607 · Unknown · Vsp Driver

Name of the Vulnerable Software and Affected Versions: vsp driver affected versions not specified Description: The issue is related to a possible missing verification of incorrect input in the vsp driver. This could lead to a local denial of service with no additional execution privileges needed...

PT-2024-23599 · Unknown · Ros Kinetic Kame

Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue concerns an unauthorized information access vulnerability. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2024-2185 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially...

PT-2024-11007 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions 8.x Description: The issue is related to an Access Control problem. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...