Unspecified Vulnerability in ChurchCRM (CNVD-2024-35648)

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0 that stems from a time-based SQL blind injection vulnerability in the CurrentFundraiser GET parameter of the FRCatalog.php page. No details of the vulnerability are provided at this tim...

PT-2024-5699 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to disclose protected information. There is no information about the...

PT-2024-5697 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information provided abo...

PT-2024-6529 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for iOS affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. There is ...

PT-2024-8113 · Ocean Data Systems · Ocean Data Systems Dream Report

Name of the Vulnerable Software and Affected Versions: Ocean Data Systems Dream Report affected versions not specified Description: The issue is related to an incorrect permission vulnerability. This could allow a local unprivileged attacker to escalate their privileges and potentially cause a...

PT-2024-6182 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System ReFS. It is caused by a buffer overflow in memory, allowing a...

PT-2024-5742

Name of the Vulnerable Software and Affected Versions Azure Stack Hub affected versions not specified Description The issue is related to insufficient input validation in the integrated Azure Stack Hub hybrid cloud computing system. Exploitation of this issue may allow an attacker to elevate thei...

PT-2024-5653 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory in the Kernel Streaming WOW Thunk Service Driver of Windows operating systems. This can allow an attacker to elevate their privileges...

PT-2024-5649 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation. This can allow an attacker to elevate their privileges. The estimated...

PT-2024-5741 · Microsoft · Officeplus

Name of the Vulnerable Software and Affected Versions: Microsoft OfficePlus affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It involves incorrect handling of symbolic links before accessing a file, which could allow an attacker to...

PT-2024-5625 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server, which can allow an attacker to...

PT-2024-6658 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft PowerPoint, specifically in the parsing of PPTX files. This vulnerability can be exploited to allow an...

PT-2024-5696 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to a use-after-free vulnerability in the WinSock driver of Windows operating systems. This could allow an attacker to elevate thei...

PT-2024-38517

Name of the Vulnerable Software and Affected Versions Transsion Carlcare App affected versions not specified Description A logical vulnerability in the Transsion Carlcare mobile application may lead to user information leakage risks. Recommendations At the moment, there is no information about a...

CVE-2024-32765 QTS, QuTS hero

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...

CVE-2024-32765 QTS, QuTS hero

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...

PT-2024-7369 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server. An attacker can exploit this by sending a specially crafted API request to obtain user informatio...

PT-2024-29988 · Dorsett Controls · Dorsett Controls Infoscan

Name of the Vulnerable Software and Affected Versions: Dorsett Controls InfoScan affected versions not specified Description: The issue concerns a leak of possible sensitive information through the response headers and the rendered JavaScript prior to user login. Recommendations: At the moment,...

PT-2024-29698 · Contacts · Contacts

Name of the Vulnerable Software and Affected Versions: Contacts module affected versions not specified Description: The issue is related to an access permission verification vulnerability in the Contacts module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-37933 · Journyx · Journyx

Name of the Vulnerable Software and Affected Versions: Journyx affected versions not specified Description: The issue allows attackers to craft a malicious link that, when clicked, will execute arbitrary JavaScript in the context of the Journyx web application. Recommendations: At the moment, the...