PT-2024-5182 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.2, 23.0.5 and earlier Description: The issue is related to a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

WordPress plugin SKT Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-25970 · Unknown · Urban Base Z-Downloads

Name of the Vulnerable Software and Affected Versions: URBAN BASE Z-Downloads versions 1.11.3 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Z-Downloads component. Recommendations: For versions 1.11.3 and earlier, update to a...

PT-2024-21911

Name of the Vulnerable Software and Affected Versions Plantronics Hub versions 3.25.1 and below Description A privilege escalation issue exists in the updater for Plantronics Hub, allowing attackers to gain elevated access. It is recommended to patch immediately and monitor for signs of compromis...

PT-2024-25867 · Unknown · Thim Elementor Kit

Name of the Vulnerable Software and Affected Versions: Thim Elementor Kit versions 1.1.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Stored XSS. This allows for the storage of malicious scripts in a website, which...

WordPress plugin EPROLO Dropshipping 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin ARForms Form Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Debug Info 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Debug Info A cross-site scripting...

PT-2024-25543 · Supsystic · Digital Publications By Supsystic

Name of the Vulnerable Software and Affected Versions: Supsystic Digital Publications by Supsystic versions 1.7.7 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Supsystic Digital Publications by Supsystic. Recommendations: For...

PT-2024-20388 · Zoho · Zoho Manageengine Admanager Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADManager Plus versions 7203 and prior Description: The issue is related to a Privilege Escalation vulnerability in the Modify Computers option. This vulnerability allows for improper privilege management, which can lead...

PT-2024-31726

Name of the Vulnerable Software and Affected Versions: Xpdf versions 4.05 and earlier Description: A PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. Recommendations: For Xpdf versions 4.05 and earlier, as a temporary workaround, consider disabling the...

PT-2024-25834 · WordPress · Sheets To Wp Table Live Sync

Name of the Vulnerable Software and Affected Versions: Sheets To WP Table Live Sync versions 3.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations:...

D-Link DIR-845 安全漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-845L v1.01KRb03 version and earlier versions, which stems from a privilege bypass vulnerability in the getcfg.php component...

WordPress plugin SEOPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

SOGo 安全漏洞

SOGo is a very fast and extensible modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in Alinto SOGo 5.10.0 and prior versions that originates from...

PT-2024-25573 · Avirtum · Avirtum Ipanorama 360 Wordpress Virtual Tour Builder

Name of the Vulnerable Software and Affected Versions: Avirtum iPanorama 360 WordPress Virtual Tour Builder versions 1.8.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder. Recommendations: For Avirtum...

WordPress plugin Giphypress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin CodeBard s Patron Button and Widgets for Patreon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin CodeBard ...

WordPress plugin Social Sharing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-25546 · Unknown · Xserver Migrator

Name of the Vulnerable Software and Affected Versions: Xserver Migrator versions 1.6.1 and earlier Description: A Cross-Site Request Forgery CSRF issue leads to Arbitrary File Upload in Xserver Migrator. This allows an attacker to potentially upload arbitrary files. Recommendations: For versions...