Dell OpenManage Integration with Microsoft Windows Admin Center Security Vulnerability

Dell OpenManage Integration with Microsoft Windows Admin Center is an extension for Windows Admin Center from Dell USA. A security vulnerability exists in Dell OpenManage Integration with Microsoft Windows Admin Center 3.1 and prior versions, which stems from a remote code execution vulnerability...

PT-2024-2189 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to an unchecked return value in some IntelR ThunderboltTM DCH drivers, which may allow an unauthenticated user to potentially enable denial of...

PT-2024-1762 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2024-3539 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2024-1679 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-1758 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to a buffer overflow operation in the memory of the Adobe Substance 3D Painter program, which can allow an attacker to execute arbitrary code. Exploitation of...

OpenRefine Path Traversal Vulnerability

OpenRefine is a Java-based open source tool. The product is mainly used for loading data, analyzing data and cleaning data. A path traversal vulnerability exists in OpenRefine 3.7.7 and earlier versions, which stems from the presence of a path traversal vulnerability...

Gambio Log Information Disclosure Vulnerability

Gambio is an all-in-one e-commerce solution from Gambio, Inc. A log information disclosure vulnerability exists in Gambio 4.9.2.0 and earlier versions, which originates from a vulnerability that allows attackers to obtain sensitive information via error-handler.log.json and...

PT-2024-20664 · Unitedthemes · Unitedthemes Brooklyn

Name of the Vulnerable Software and Affected Versions: UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme versions 4.9.7.6 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks. There is no...

PT-2024-14979 · WordPress · Splashscreen Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Splashscreen WordPress plugin versions 0.20 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the Splashscreen WordPress plugin. This could allow attackers to make a logged-in admin change...

PT-2024-20668 · Unknown · Otwthemes.Com Buttons Shortcode/Widget

Name of the Vulnerable Software and Affected Versions: OTWthemes.Com Buttons Shortcode and Widget versions 1.16 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attack...

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

Envoy Security Vulnerabilities

Envoy is an open source distributed proxy server. A security vulnerability exists in Envoy versions prior to 1.29.1, which stems from a downstream connection using the PROXY protocol that can bypass external authentication...

WikiDiscover Cross-Site Scripting Vulnerability

WikiDiscover is a Miraheze open source extension for CreateWiki hosted farms. A cross-site scripting vulnerability exists in previous versions of WikiDiscover 267e763a0d7460f001693c42f67717a0fc3fd6bb. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

WordPress Plugin Podlove Subscribe button SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress plugin WP-CFM Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Canon Multiple Products Buffer Error Vulnerability

Canon Color imageCLASS is a series of printers from Canon Japan. A security vulnerability exists in several Canon products. The vulnerability can be exploited by an attacker to execute arbitrary code. The following products and versions are affected: Satera LBP670C Series, Satera MF750C Series...

PT-2024-3869 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Koha Library Management System versions 23.05.05 and earlier Description: The issue is related to a lack of neutralization of elements in a CSV file, affecting the components members/moremember.pl and admin/aqbudgets.pl. This allows a remote...

B&R Industrial Automation GmbH Runtime Cross-Site Scripting Vulnerability

B&R Industrial Automation GmbH Runtime is a major component of AS from B&R Industrial Automation, an Austrian company. A cross-site scripting vulnerability exists in B&R Industrial Automation GmbH Runtime G4.93 and earlier versions, which originates from a vulnerability that could allow a remote...

OpenConnect Security Vulnerability

OpenConnect is an open source application for connecting to virtual private networks. A security vulnerability exists in OpenConnect 7.08 and earlier versions, which stems from credentials and session cookie information being stored insecurely in memory, which can be scanned and credentials...