PT-2024-37931 · Journyx · Journyx

Name of the Vulnerable Software and Affected Versions: Journyx affected versions not specified Description: The issue arises from the generation of password reset tokens using an insecure source of randomness. This allows attackers who are aware of the username of the Journyx installation user to...

Amazon Linux 2023 : libsndfile, libsndfile-devel, libsndfile-utils (ALAS2023-2024-701)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-701 advisory. Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other...

PT-2024-37563 · Opentext · Opentext Arcsight Intelligence

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Intelligence affected versions not specified Description: A vulnerability related to incorrect authorization has been identified. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2024-38398 · Trimble · Trimble Sketchup

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...

PT-2024-18902 · Unknown · Resource Manager

Name of the Vulnerable Software and Affected Versions: Resource Manager affected versions not specified Description: The issue is related to memory corruption that occurs when preparing a shared memory notification for a memparcel in Resource Manager. Recommendations: At the moment, there is no...

PT-2024-25067 · Unknown · Hgsl Driver

Name of the Vulnerable Software and Affected Versions: HGSL driver affected versions not specified Description: The issue is related to memory corruption that occurs during memory allocation in the HGSL driver. Recommendations: At the moment, there is no information about a newer version that...

CVE-2024-28297

SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2024-28297

AzureSoft MyHorus 4.3.5 contains an SQL injection vulnerability exploitable by authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected component is the application’s input handling (unspecified vectors) that leads to confidential data exposure risk (CVE-2024-28297)...

PT-2024-6567 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: An authenticated command injection issue exists in the ArubaOS command line interface, allowing successful exploitation to result in the ability to inject shell commands on the underlying...

CVE-2024-28297

SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2024-6565 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A Path Traversal vulnerability exists in the ArubaOS, related to incorrect restriction of directory path names with limited access. Successful exploitation of this vulnerability allows an...

Unspecified Vulnerability in Tencent WeChat (CNVD-2025-06512)

Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and text, among other things. An unspecified vulnerability exists in Tencent WeChat. An attacker can exploit the vulnerability to elevate...

DLink DIR Information Disclosure (PT-2011-30)

The version of DLink DIR installed on the remote host is affected by information disclosure Vulnerability as referenced in the PT-2011-30 advisory. The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vector...

PT-2024-10382 · Firebird · Firebird

Name of the Vulnerable Software and Affected Versions: Популяционный раковый регистр and Госпитальный раковый регистр affected versions not specified Description: The issue is related to the Firebird component of the software, which stores passwords along with decryption means. This could allow a...

PT-2024-29523 · Accupos · Accupos

Name of the Vulnerable Software and Affected Versions: AccuPOS affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

PT-2024-10607 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a Server-Side Request Forgery SSRF in Apache Struts. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2024-10605 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a remote code execution problem. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendations: At...

PT-2024-10730 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Scripting XSS problem. No specific details about affected devices, real-world incidents, or technical exploitation details are provided...