PT-2024-3507 · Huawei · Huawei Matebook D16

Name of the Vulnerable Software and Affected Versions: Huawei Matebook D16 version v2.26 Description: The issue is related to a buffer overflow in the SMRAM memory of Huawei personal computers' UEFI BIOS microprogram, which can allow an attacker to execute arbitrary code in System Management Mode...

PT-2024-24501 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: The issue is a stack overflow vulnerability located in the adslPwd parameter of the formWanParameterSetting function. This vulnerability can be exploited, potentially allowing unauthorized access or...

PT-2024-24486 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function. Recommendations: For Tenda W30E version 1.0 V1.0.1.25633, as a temporary...

CVE-2024-27086

The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET Android e.g., MAUI using the library from versions 4.48.0 to 4.60.0 are impacted by a low severity vulnerability. A malicious application running on a customer...

Improper Export of Android Application Components

Overview Affected versions of this package are vulnerable to Improper Export of Android Application Components in AuthenticationAgentActivity.cs, which can allow denial of service to applications on the same device using MSAL.NET for authentication. A malicious application installed by the victim...

CVE-2024-27086

MSAL.NET for Xamarin Android and .NET Android (MAUI) is affected when using versions 4.48.0–4.60.0, due to an incorrect activity export configuration that can allow a local attacker on the device to cause a denial of service and block user login to affected apps. The vulnerability is classed as L...

PT-2024-3723 · Oracle +1 · Oracle Graalvm Enterprise Edition +2

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to insufficient protection of internal data in the Compiler component of Oracle GraalVM for JDK a...

PT-2024-22883 · Cskefu · Cskefu

Name of the Vulnerable Software and Affected Versions: cskefu version 7 Description: The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity. Recommendations: For cskefu version 7, consider implementing proper session expirati...

PT-2024-3227 · Tenda · Tenda Tx9

Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical issue has been found in the function sub 42C014 of the file /goform/PowerSaveSet. The manipulation of the argument time leads to a stack-based buffer overflow. This issue can be exploited...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2024:1287-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1287-1 advisory. Updated to version 9.1.0111, fixes the following security problems - CVE-2023-48231:...

SUSE CVE-2024-26790

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read There is chip ls1028a errata: The SoC may hang on 16 byte unaligned read transactions by QDMA. Unaligned read transactions initiated by QDMA may stall in the NOC...

GHSA-G8FC-VRCG-8VJG Constallation has pods exposed to peers in VPC

Impact Cilium allows outside actors world entity to directly access pods with their internal pod IP, even if they are not exposed explicitly e.g. via LoadBalancer. A pod that does not authenticate clients and that does not exclude world traffic via network policy may leak sensitive data to an...

PT-2024-10474

Name of the Vulnerable Software and Affected Versions sqlparse affected versions not specified Description The issue is related to the sqlparse.parse function, which can lead to a Denial of Service due to a RecursionError when processing a heavily nested list. This can be exploited by a remote...

PT-2024-24397 · Unknown · Kimili Flash Embed

Name of the Vulnerable Software and Affected Versions: Kimili Flash Embed versions 2.5.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application tha...

PT-2024-24410

Name of the Vulnerable Software and Affected Versions NextMove Lite versions through 2.18.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability in XLPlugins NextMove Lite. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2024-27825 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability, which occurs through the /admin/DeviceReplication endpoint, specifically in the execution range field, and affects all parameters. This cou...

PT-2024-3032 · Unknown +1 · Kv Replay Viewer +2

Name of the Vulnerable Software and Affected Versions: KV STUDIO versions 11.64 and earlier KV REPLAY VIEWER versions 2.64 and earlier VT5-WX15/WX12 versions 6.02 and earlier Description: An out-of-bounds write vulnerability exists, which may lead to information disclosure or arbitrary code...

PT-2024-3222 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: The issue is related to the class FileTransfer in Brocade SANnav, which uses the ssh-rsa signature scheme with a SHA-1 hash. This could allow a remote,...

PT-2024-24063 · Favicon · Favicon

Name of the Vulnerable Software and Affected Versions: Favicon versions 1.3.29 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user...

PT-2024-24403 · Unknown · Advanced Page Visit Counter

Name of the Vulnerable Software and Affected Versions: Advanced Page Visit Counter versions n/a through 8.0.6 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This vulnerability affects the...