EUVD-2024-1382

Malicious code in bioql PyPI...

CVE-2025-24537

Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.7.0...

CVE-2022-2408

The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels...

CVE-2025-24494

Path traversal may allow remote code execution using privileged account requires device admin account, cannot be performed by a regular user. In combination with the 'Upload' functionality this could be used to execute an arbitrary script or possibly an uploaded binary. Remediation in Version...

CVE-2025-24494

Path traversal may allow remote code execution using privileged account requires device admin account, cannot be performed by a regular user. In combination with the 'Upload' functionality this could be used to execute an arbitrary script or possibly an uploaded binary. Remediation in Version...

CVE-2025-24537

Cross-Site Request Forgery CSRF vulnerability in StellarWP The Events Calendar the-events-calendar allows Cross Site Request Forgery.This issue affects The Events Calendar: from n/a through = 6.7.0...

PT-2024-25898 · Themepunch Ohg · Slider Revolution

Name of the Vulnerable Software and Affected Versions: Slider Revolution versions prior to 6.7.0 Description: The issue is related to a Missing Authorization vulnerability in ThemePunch OHG Slider Revolution. Recommendations: For versions prior to 6.7.0, update to version 6.7.0 or later to resolv...

OPENSUSE-SU-2024:13925-1 libQt6Concurrent6-6.7.0-2.1 on GA media

These are all security issues fixed in the libQt6Concurrent6-6.7.0-2.1 package on the GA media of openSUSE Tumbleweed...

WordPress Slider Revolution Plugin < 6.7.0 is vulnerable to Broken Access Control

Software Slider Revolution Type Plugin Vulnerable versions 6.7.0 Fixed in 6.7.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34444 Patch priority Medium CVSS severity Medium 7.1 Developer ThemePunch PSID de1987954a97 Credits Rafie Muhammad Patchstack...

CVE-2024-34345 @cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1...

PT-2024-25802 · Unknown · Cyclonedx Javascript Library

Name of the Vulnerable Software and Affected Versions: CycloneDX JavaScript library version 6.7.0 Description: The CycloneDX JavaScript library is vulnerable to XML External Entity XXE injections when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1. To...

PT-2024-14652 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7.0-rc3 Description: The Linux kernel has a vulnerability in the net/sched module, specifically in the act ct function. This function adds a reference to the skb socket buffer before defragmentation, which can...

PT-2024-21158 · Unknown · Product Catalog (Csv

Name of the Vulnerable Software and Affected Versions: Product Catalog CSV, Excel Import simpleimportproduct versions = 6.7.0 Description: A guest can upload files with extensions .php, potentially allowing malicious code execution. Recommendations: For versions = 6.7.0, restrict access to the fi...

PT-2024-3778

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.7.0 Description A potential deadlock can occur when enabling ASPM during the probe of Qualcomm PCIe controllers, as reported by lockdep. This issue is caused by a possible recursive locking scenario where a task tries t...

CVE-2023-6913

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView withou...

CVE-2023-6913 Session Hijacking on Imou Life app

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView withou...

CVE-2023-6913

The CVE-2023-6913 entry relates to Imou Life (v6.7.0) and describes a session hijacking issue caused by the QR code flow not filtering codes when pairing a new device, which can trigger WebView to run without user prompt. The result is potential user account takeovers and phishing via the affecte...

PT-2023-28054 · Payara · Payara Micro/Embedded +1

Name of the Vulnerable Software and Affected Versions: Payara Server versions 5.0.0 through 5.56.0 Payara Server versions 4.1.2.191 through 4.1.2.191.45 Payara Server versions 6.0.0 through 6.7.0 Payara Server versions 6.2023.1 through 6.2023.10 Payara Micro and Embedded versions 5.0.0 through...

CVE-2023-36551

A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to information disclosure via a crafted http request...

CVE-2023-39971 Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...