PT-2024-26874 · Unknown · Com.Callassistant.Android

Name of the Vulnerable Software and Affected Versions: com.callassistant.android aka AI Call Assistant & Screener version 1.174 Description: The issue allows any installed application, even without permissions, to place phone calls without user interaction by sending a crafted intent via the...

PT-2024-34681 · Unknown · Advanced Messaging Module

Name of the Vulnerable Software and Affected Versions: Advanced Messaging Module affected versions not specified Description: The issue concerns the verification of message types in the advanced messaging module. Successful exploitation may affect availability. Recommendations: At the moment, the...

aequitas (>=0.26.0 <=0.42.0), ai-parrot (>=0.5.0 <=0.10.0) +66 more potentially affected by unknown CVE via markdown2 (>=2.3.0 <=2.5.0)

markdown2 PYPI version =2.3.0, =0.26.0, =0.5.0, =0.0.1, =0.0.1, =2.0.4, =0.39.0, =0.1.0, =0.0.465, =0.0.45, =0.5.29, =0.1.1, =0.1.0, =0.1.2 - criscostack =1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-MARKDOWN2-8320937...

iddm (>=1.1.8b3 <=1.2.3), lazyllm (>=0.3.0 <=0.6.3) potentially affected by unknown CVE via gradio (>=5.0.0 <=5.0.0b10)

gradio PYPI version =5.0.0, =1.1.8b3, =0.3.0, =0.6.3 Source cves: unknown CVE Source advisory: SNYK:PYTHON-GRADIO-8320941...

elemeno-ai-sdk (>=0.0.77 <=0.6.11), elemeno-mlops-cli (>=0.0.1 <=0.0.4) +12 more potentially affected by unknown CVE via feast (>=0.14.1 <=0.39.1)

feast PYPI version =0.14.1, =0.0.77, =0.0.1, =0.1.0, =0.3.0, =0.0.2, =1.0.0, =0.1.0, =0.0.1, =0.0.23 Source cves: unknown CVE Source advisory: SNYK:PYTHON-FEAST-8400488...

aistrainer (>=0.0.1 <=0.0.13), aivoifu (>=0.2.8 <=0.2.9) +21 more potentially affected by unknown CVE via deepspeed (>=0.10.2 <=0.15.1)

deepspeed PYPI version =0.10.2, =0.0.1, =0.2.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEEPSPEED-8320951...

barbarian (>=0.1.0 <=0.3.0), bincrafters-remove-outdated (=0.5.0) +47 more potentially affected by unknown CVE via conan (>=2.0.0b10 <=2.8.1)

conan PYPI version =2.0.0b10, =0.1.0, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =2.2.0, =0.36.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0a1, =0.1.0, =2.3.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-CONAN-8400482...

Boa (>=0.13.0 <=0.13.1), arci-urdf-viz (>=0.0.7 <=0.1.0) +87 more potentially affected by unknown CVE via fast-float (=0.2.0)

fast-float CARGO version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - Boa =0.13.0, =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.19.0, =0.3.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.20.2 and more Source cves...

org.openrefine:benchmark (>=3.6-beta1 <=3.8.2), org.openrefine:database (>=3.6-beta1 <=3.8.2) +7 more potentially affected by unknown CVE via org.openrefine.dependencies:butterfly (>=1.2.3 <=1.2.5)

org.openrefine.dependencies:butterfly MAVEN version =1.2.3, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.7-beta1, =3.6-beta1, =3.6.2 Source cves: unknown CVE Source advisory: OSV:GHSA-MPCW-3J5P-P99X...

b4ae (>=2.0.0 <=2.1.3), clatter (>=0.1.2-alpha <=2.0.0-rc.1) +26 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2 <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - qux-pqc =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

SUSE CVE-2024-21210

unknown...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +316 more potentially affected by unknown CVE via gradio (>=1.7.7 <=4.8.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.1.0, =0.8.11, =0.4.0, =0.0.4, =0.7.0.dev134, =0.7.0.dev143 - anymodality =0.1.0 - apillava =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-26JH-R8G2-6FPR...

actix-session-surrealdb (>=0.1.0 <=0.1.5) potentially affected by unknown CVE via surrealdb (=1.0.0-beta.9)

surrealdb CARGO version =1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-9722-9J67-VJCR...

inventree-digikey-integration (>=0.1.1 <=1.0.0), kintree (>=1.1.0 <=1.1.3) potentially affected by unknown CVE via inventree (>=0.13.5 <=0.14.0)

inventree PYPI version =0.13.5, =0.1.1, =1.1.0, =1.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-VX3H-QWQW-R2WQ...

akita-ai (>=0.1.1 <=0.1.102) potentially affected by unknown CVE via chainlit (=1.0.0)

chainlit PYPI version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - akita-ai =0.1.1, =0.1.102 Source cves: unknown CVE Source advisory: SNYK:PYTHON-CHAINLIT-8161313...

PT-2024-39382 · Unknown · Codezips Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Codezips Online Shopping Portal version 1.0 Description: A vulnerability was found in the Codezips Online Shopping Portal, affecting an unknown functionality of the file insert-product.php. The manipulation of the productimage1, productimage2...

afarray (>=0.1.0 <=0.15.1), b-table (>=0.1.0 <=0.2.1) +38 more potentially affected by unknown CVE via get-size-derive (>=0.1.2 <=0.1.3)

get-size-derive CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.8.0, =0.1.0, =0.1.0, =0.3.1, =0.9.1, =0.0.6, =0.1.0, =0.8.0, =0.9.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0427...

afarray (>=0.1.0 <=0.15.1), b-table (>=0.1.0 <=0.2.1) +42 more potentially affected by unknown CVE via get-size (>=0.1.3 <=0.1.4)

get-size CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.8.0, =0.1.0, =0.3.1, =0.3.3, =0.1.0, =0.9.1, =0.14.0 - pathlink =0.1.0 - poseidon-bn128 =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0425...

better-lambda-deploy (>=0.0.4 <=0.6.9) potentially affected by unknown CVE via aws-sam-cli (>=0.40.0 <=0.53.0)

aws-sam-cli PYPI version =0.40.0, =0.0.4, =0.6.9 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

actix-session-surrealdb (>=0.1.0 <=0.1.5) potentially affected by unknown CVE via surrealdb (=1.0.0-beta.9)

surrealdb CARGO version =1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-64F8-PJGR-9WMR...