PT-2024-38721 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: A security issue has been identified in Prisma Access Browser. For more information, refer to the monthly vulnerability updates. Recommendations: At the moment, there is no...

PT-2024-38725 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: The issue concerns Prisma Access Browser. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendation...

PT-2024-7304 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to an out-of-bounds read in the UEFI firmware of some Intel processors. This can potentially allow a privileged user to cause a denial of service via local...

PT-2024-27904 · Microsoft · Azure Stack Hub

Name of the Vulnerable Software and Affected Versions: Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Stack Hub. There is no information provided about the estimated number of potentially affected devices...

PT-2024-27897 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide...

PT-2024-6278 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a memory reading boundary error in the Windows Remote Access Connection Manager. It allows a remote attacker to elevate their...

PT-2024-6266 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized...

PT-2024-6306 · Microsoft · Windows Admin Center +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Admin Center affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information or cause a denial of service. There is no information abou...

PT-2024-30588 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue concerns an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2024-7323 · Intel +1 · Intel Uefi Firmware +1

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in the UEFI firmware of certain Intel processors. This flaw may allow a privileged user to potentially enable escalation of...

PT-2024-6267 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system. There is no information...

PT-2024-6268

Name of the Vulnerable Software and Affected Versions Windows Graphics Component affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows Graphics Component. This vulnerability is associated with a buffer overflow in memory, which...

PT-2024-6240 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Networking service, which is caused by a null pointer dereference. This could allow a remote attacker to cause a...

PT-2024-27902 · Microsoft · Azure Stack Hub

Name of the Vulnerable Software and Affected Versions: Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Stack Hub. There is no information provided about the estimated number of potentially affected devices...

PT-2024-5983 · Schneider Electric · Vijeo Designer

Name of the Vulnerable Software and Affected Versions: Vijeo Designer affected versions not specified Description: The issue is related to improper privilege management, which could lead to unauthorized access, loss of confidentiality, integrity, and availability of the workstation. This occurs...

PT-2024-6256 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to synchronization errors in the Windows Remote Desktop Licensing Service, specifically a "race condition" scenario. This can be...

PT-2024-6305 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to disclose...

PT-2024-38578 · Axis Communications · Axis Os

Name of the Vulnerable Software and Affected Versions: AXIS OS affected versions not specified Description: A flaw was found in the protection for device tampering, commonly known as Secure Boot, in AXIS OS, making it vulnerable to a sophisticated attack to bypass this protection. To the vendor's...

CVE-2024-38642

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 a...

CVE-2024-38641

CVE-2024-38641 is an OS command injection vulnerability affecting QNAP QTS and QuTS hero. The issue could allow local network users to execute commands via unspecified vectors; impact is described as high (confidentiality, integrity, and availability). Fixed in QTS 5.1.8.2823 build 20240712 and l...