PT-2024-1762 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2024-1679 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-3539 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2024-1758 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to a buffer overflow operation in the memory of the Adobe Substance 3D Painter program, which can allow an attacker to execute arbitrary code. Exploitation of...

Gambio Log Information Disclosure Vulnerability

Gambio is an all-in-one e-commerce solution from Gambio, Inc. A log information disclosure vulnerability exists in Gambio 4.9.2.0 and earlier versions, which originates from a vulnerability that allows attackers to obtain sensitive information via error-handler.log.json and...

OpenRefine Path Traversal Vulnerability

OpenRefine is a Java-based open source tool. The product is mainly used for loading data, analyzing data and cleaning data. A path traversal vulnerability exists in OpenRefine 3.7.7 and earlier versions, which stems from the presence of a path traversal vulnerability...

PT-2024-20664 · Unitedthemes · Unitedthemes Brooklyn

Name of the Vulnerable Software and Affected Versions: UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme versions 4.9.7.6 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks. There is no...

PT-2024-14979 · WordPress · Splashscreen Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Splashscreen WordPress plugin versions 0.20 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the Splashscreen WordPress plugin. This could allow attackers to make a logged-in admin change...

PT-2024-20668 · Unknown · Otwthemes.Com Buttons Shortcode/Widget

Name of the Vulnerable Software and Affected Versions: OTWthemes.Com Buttons Shortcode and Widget versions 1.16 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attack...

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Envoy Security Vulnerabilities

Envoy is an open source distributed proxy server. A security vulnerability exists in Envoy versions prior to 1.29.1, which stems from a downstream connection using the PROXY protocol that can bypass external authentication...

WikiDiscover Cross-Site Scripting Vulnerability

WikiDiscover is a Miraheze open source extension for CreateWiki hosted farms. A cross-site scripting vulnerability exists in previous versions of WikiDiscover 267e763a0d7460f001693c42f67717a0fc3fd6bb. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

WordPress plugin WP-CFM Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Plugin Podlove Subscribe button SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

PT-2024-3869 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Koha Library Management System versions 23.05.05 and earlier Description: The issue is related to a lack of neutralization of elements in a CSV file, affecting the components members/moremember.pl and admin/aqbudgets.pl. This allows a remote...

Canon Multiple Products Buffer Error Vulnerability

Canon Color imageCLASS is a series of printers from Canon Japan. A security vulnerability exists in several Canon products. The vulnerability can be exploited by an attacker to execute arbitrary code. The following products and versions are affected: Satera LBP670C Series, Satera MF750C Series...

OpenConnect Security Vulnerability

OpenConnect is an open source application for connecting to virtual private networks. A security vulnerability exists in OpenConnect 7.08 and earlier versions, which stems from credentials and session cookie information being stored insecurely in memory, which can be scanned and credentials...

B&R Industrial Automation GmbH Runtime Cross-Site Scripting Vulnerability

B&R Industrial Automation GmbH Runtime is a major component of AS from B&R Industrial Automation, an Austrian company. A cross-site scripting vulnerability exists in B&R Industrial Automation GmbH Runtime G4.93 and earlier versions, which originates from a vulnerability that could allow a remote...

CVE-2024-21780

Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service DoS condition. Note that the affected products are no longer supported...

KDDI HOME SPOT CUBE2 Security Vulnerability

KDDI HOME SPOT CUBE2 is a home wireless router from KDDI Japan. A security vulnerability exists in KDDI HOME SPOT CUBE2 version V102 and prior versions. An attacker can exploit the vulnerability to remotely execute code...