PT-2024-39476 · Funnelkit · Recover Woocommerce Cart Abandonment

Name of the Vulnerable Software and Affected Versions: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin versions prior to 3.3.0 Description: The issue allows unauthenticated users to perform SQL injection attacks due to the lack...

PT-2024-38581 · Unknown · Vsrm Supplier Relationship Management System

Name of the Vulnerable Software and Affected Versions: vSRM Supplier Relationship Management System versions prior to 28.08.2024 Description: The issue affects the vSRM Supplier Relationship Management System, allowing Reflected XSS, or Cross-Site Scripting XSS, due to improper neutralization of...

PT-2024-31980 · Hathway · Hathway Skyworth Router Cm5100-511

Name of the Vulnerable Software and Affected Versions: Hathway Skyworth Router CM5100-511 version 4.1.1.24 Description: The issue concerns the storage of sensitive information about connected devices in plaintext. This affects devices connected via USB and Wifi. Recommendations: For version...

PT-2024-16629 · WordPress · Tutor Lms Elementor Addons

Name of the Vulnerable Software and Affected Versions: Tutor LMS Elementor Addons plugin for WordPress versions up to, and including, 2.1.5 Description: The issue is related to a missing capability check on the install etlms dependency plugin function, allowing authenticated attackers with...

PAN-OS: Server-Side Request Forgery in WildFire

A server-side request forgery in PAN-OS software enables an authenticated attacker to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible. Work around: Recommended mitigation—The vast majority of firewalls already...

PT-2024-16537 · WordPress · Buddypress Builder For Elementor – Buddybuilder

Name of the Vulnerable Software and Affected Versions: The BuddyPress Builder for Elementor – BuddyBuilder plugin for WordPress versions up to, and including, 1.7.4 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft...

PT-2024-35166 · Unopim · Unopim

Name of the Vulnerable Software and Affected Versions: UnoPim versions prior to 0.1.5 Description: A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG file containing an...

PT-2024-8804 · Intel · Intel Neural Compressor

Name of the Vulnerable Software and Affected Versions: Intel Neural Compressor versions prior to v3.0 Description: The issue is related to insufficient input validation in the Intel Neural Compressor library, which can be exploited by a remote attacker to potentially escalate privileges. This can...

PT-2024-19184 · Sound Research · Sound Research Secomn64

Name of the Vulnerable Software and Affected Versions: HP PC products using the Sound Research SECOMN64 driver affected versions not specified Description: The issue is related to potential vulnerabilities in the audio package for certain HP PC products, specifically those using the Sound Researc...

PT-2024-20849 · Superscan · Superscan

Name of the Vulnerable Software and Affected Versions: SuperScan version 4.1 Description: A buffer overflow issue was discovered in SuperScan, which occurs via the Hostname/IP parameter. This issue grants an attacker full control. Recommendations: For SuperScan version 4.1, patch immediately and...

PT-2024-8703 · Ivanti · Ivanti Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 Ivanti Policy Secure versions prior to 22.7R1.1 Description: The issue is related to command injection, allowing a remote authenticated attacker with admin privileges to achieve remote code...

PT-2024-16181 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2024.2 Description: An unauthenticated remote Denial of Service DoS via the auto-generation function was identified. The issue was reported by Karol Więsek. Recommendations: For Helix Core versions prior to 2024.2...

PT-2024-34919 · Unknown · Dang Ngoc Binh Audio Record

Name of the Vulnerable Software and Affected Versions: Dang Ngoc Binh Audio Record versions n/a through 1.0 Description: The issue allows an attacker to upload a web shell to a web server due to an unrestricted upload of file with dangerous type vulnerability. This enables remote hackers to uploa...

PT-2024-34863 · Perception System · Perception System Ajax Content Filter

Name of the Vulnerable Software and Affected Versions: Perception System Ajax Content Filter versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-16580 · Zoho · Zoho Manageengine Sharepoint Manager Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine SharePoint Manager Plus versions 4503 and prior Description: The issue is an authenticated XML External Entity XXE vulnerability in the Management option. This vulnerability impacts specific versions of the software, allowing...

PT-2024-16672 · Unknown · 1000 Projects Bookstore Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/login process.php of the component Login. The manipulation of the argument unm leads to SQL injection. T...

PT-2024-34407 · Sourcecodester · Sourcecodester Survey Application System

Name of the Vulnerable Software and Affected Versions: SourceCodester Survey Application System version 1.0 Description: The issue is related to SQL Injection in the takeSurvey.php file via the id parameter. This allows for potential exploitation. Recommendations: For SourceCodester Survey...

PT-2024-38737 · WordPress · The Events Calendar

Name of the Vulnerable Software and Affected Versions: Registrations for the Events Calendar WordPress plugin versions prior to 2.12.4 Description: The issue concerns a failure to sanitise and escape certain parameters when accepting event registrations, potentially allowing unauthenticated users...

PT-2024-7886 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: A stored Cross-Site Scripting XSS vulnerability exists in Adobe Experience Manager, which an attacker could exploit to inject malicious scripts into vulnerable form fields. Thi...

PT-2024-12196 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X versions prior to the latest version Description: Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be...