Debian: Security Advisory (DLA-3989-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-12084 · Ninja Team · Filebird

Name of the Vulnerable Software and Affected Versions: Ninja Team Filebird versions through 5.1.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.1.4,...

Google Chrome Security Update (stable-channel-update-for-desktop-2024-12) - Windows

Google Chrome is prone to a type confusion vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

PT-2024-35298 · Templines · Templines Tm Islamic Helper

Name of the Vulnerable Software and Affected Versions: Templines TM Islamic Helper versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables malicious script...

PT-2024-27093 · Symfony · Symfony

Name of the Vulnerable Software and Affected Versions: Symfony version 7.0.3 Description: A deserialization vulnerability is reported to exist in the Stub class of the VarDumper module in Symfony. The issue stems from deficiencies in handling properties with null or uninitialized values,...

PT-2024-17259 · WordPress · Streamweasels Youtube Integration

Name of the Vulnerable Software and Affected Versions: StreamWeasels YouTube Integration plugin for WordPress versions up to, and including, 1.3.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'sw-youtube-embed' shortcode due to insufficient input sanitization...

PT-2024-27763 · Quectel · Quectel Ec25-Eux

Name of the Vulnerable Software and Affected Versions: Quectel EC25-EUX version EC25EUXGAR08A05M1G Description: A stack overflow issue was discovered in the Quectel EC25-EUX. Recommendations: For version EC25EUXGAR08A05M1G, at the moment, there is no information about a newer version that contain...

7-Zip Zstandard Decompression Integer Underflow Vulnerability - Windows

7zip is prone to a zstandard decompression integer underflow vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2024-17029 · 115Cms · 115Cms

Name of the Vulnerable Software and Affected Versions: 115cms up to 20240807 Description: A vulnerability was found in an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the type argument leads to cross-site scripting. The attack can be launched remotely...

CVE-2024-52434

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Supsystic Popup by Supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through 1.10.29...

PT-2024-16852 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical issue affects some unknown functionality of the file /admin/ad list.php?action=pass of the component Keyword Filtering. The manipulation of the keyword argument leads to SQL injection. The attack may...

PT-2024-35213 · Cmsminds · Cmsminds Boat Rental Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: cmsMinds Boat Rental Plugin for WordPress versions 1.0.1 and earlier Description: The issue allows malicious file uploads, posing a risk of web server compromise. This can enable an attacker to upload a web shell to a web server...

Intel DSA 安全漏洞

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, a must for i-card users. A security vulnerability exists in versions prior to Intel...

Intel® Thunderbolt™ Share Software Advisory

Summary: A potential security vulnerability in some Thunderbolt™ Share software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-34022 Description: Improper Access Control in some Thunderbolt™...

Intel® Granulate™ Software Advisory

Summary: A potential security vulnerability in some Intel® Granulate™ software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27200 Description: Improper access control in some Intel® Granulat...

Intel® Quartus® Prime Standard Edition Software for Windows Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01193.html...

Intel® Extension for Transformers Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for Transformers software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21799 Description: Path traversal for some Intel®...

PT-2024-10309 · Fortinet · Fortirecorder

Name of the Vulnerable Software and Affected Versions: FortiRecorder versions 7.2.0 through 7.2.1 FortiRecorder versions prior to 7.0.4 Description: The issue is related to a relative path traversal in the graphical user interface of the FortiRecorder device's firmware, which is caused by errors ...

PT-2024-34757 · Unknown · Aajoda Testimonials

Name of the Vulnerable Software and Affected Versions: Aajoda Testimonials versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Aajoda Testimonials...

PT-2024-26490 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A segmentation violation issue was discovered in vmir via the wasm parse block function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm parse block function, which can cause a...