PT-2024-13624 · Acronis · Acronis Cyber Protect 16 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions before build 37758 Acronis Cyber Protect 16 versions before build 39169 Description: The issue is related to sensitive information disclosure and manipulation due to missing authorization...

CVE-2024-2876

creationtimestamp| type| source ---|---|--- 2024-04-25 06:28:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7166 2024-05-08 20:16:54+00:00| published-proof-of-concept| https://t.me/codeb0ss/1430 2024-11-16 01:22:54+00:00| seen| https://t.me/GithubRedTeam/9046 2025-06-21...

SUSE SLES12 Security Update : nodejs16 (SUSE-SU-2024:1305-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1305-1 advisory. - CVE-2024-27983: Fixed failed assertion in node::http2::Http2Session::Http2Session that could lead to HTTP/2 server crash bsc12222...

java-1.8.0-openjdk security update

1:1.8.0.412.b08-1 - Update to shenandoah-jdk8u412-b08 GA - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - This tarball is embargoed until 2024-04-16 @ 1pm PT. - Related: RHEL-30926 1:1.8.0.412.b07-0.1.ea - Update to...

SUSE SLES15 Security Update : nodejs16 (SUSE-SU-2024:1308-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1308-1 advisory. - CVE-2024-27983: Fixed failed assertion in node::http2::Http2Session::Http2Session that could lead to HTTP/2 server crash bsc12222...

ftp.iinet.net.au Cross Site Scripting vulnerability OBB-3918506

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

movingimage.nls.uk Cross Site Scripting vulnerability OBB-3918480

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

records.wffhs.org.uk Cross Site Scripting vulnerability OBB-3918455

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dogchillhk.com Cross Site Scripting vulnerability OBB-3918377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Backend Designer Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Backend Designer Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32591 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c6752a98d119 Credits Cronus Required privilege Administrator...

WordPress WP Club Manager Plugin <= 2.2.11 is vulnerable to Cross Site Scripting (XSS)

Software WP Club Manager Type Plugin Vulnerable versions = 2.2.11 Fixed in 2.2.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-32566 Patch priority Low CVSS severity Low 6.5 Developer WP Club Manager PSID 673c46e5f536 Credits CatFather Required...

WordPress SP Project & Document Manager Plugin <= 4.71 is vulnerable to SQL Injection

Software SP Project & Document Manager Type Plugin Vulnerable versions = 4.71 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32551 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 4e8128ffc035 Credits CatFather Required privilege Author...

WordPress Tainacan Interface Theme <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Tainacan Interface Type Theme Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3867 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID dcbddfa32a84 Credits Matheus Nascimento de...

WordPress CBX Bookmark & Favorite Plugin <= 1.7.20 is vulnerable to Cross Site Scripting (XSS)

Software CBX Bookmark & Favorite Type Plugin Vulnerable versions = 1.7.20 Fixed in 1.7.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32577 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c797afa81115 Credits LVT-tholv2k Required privile...

WordPress WP Dummy Content Generator Plugin <= 3.2.1 is vulnerable to Arbitrary Code Execution

Software WP Dummy Content Generator Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.3.0 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Arbitrary Code Execution CVE CVE-2024-32599 Patch priority Low CVSS severity Low 10 Developer Deepak Anand PSID 517305868c49 Credits...

Adobe Photoshop Memory leak Vulnerability (APSB24-16) - Windows

Adobe Photoshop is prone to a Memory leak vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:photoshop";...

Adobe Photoshop 24.x < 24.7.3 / 25.x < 25.4 Vulnerability (APSB24-16)

The version of Adobe Photoshop installed on the remote Windows host is prior to 24.7.3/25.4. It is, therefore, affected by a vulnerability as referenced in the apsb24-16 advisory. - Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability that coul...

Adobe Photoshop 24.x < 24.7.3 / 25.x < 25.4 Vulnerability (macOS APSB24-16)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 24.7.3/25.4. It is, therefore, affected by a vulnerability as referenced in the apsb24-16 advisory. - Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability...

AZL-39244 CVE-2023-45288 affecting package kubevirt for versions less than 0.59.0-16

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

Rocky Linux 8 : nodejs:16 (RLSA-2024:1444)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1444 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited i...