PT-2024-35069 · Unknown · Web Testimonials

Name of the Vulnerable Software and Affected Versions: ESB Testimonials versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

PYSEC-2024-123

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other...

PT-2024-40630 · Git +1 · Libjpeg-Turbo

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the decompress yuv.cc file. No...

PT-2024-9554 · Stripe · Stripe

Name of the Vulnerable Software and Affected Versions: WPForms versions 1.8.4 through 1.9.2.1 Description: The issue is related to a missing capability check in the wpforms is admin page function, which allows authenticated attackers with Subscriber-level access and above to refund payments and...

PT-2024-18061 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A critical issue has been identified, with a previous patch reintroducing a pre-existing vulnerability. The issue is considered critical. Recommendations: At the moment, there is no...

PT-2024-16710 · Grand Vice Info · Webopac

Name of the Vulnerable Software and Affected Versions: Webopac from Grand Vice info affected versions not specified Description: The issue is a Stored Cross-site Scripting vulnerability, allowing remote attackers with regular privileges to inject arbitrary JavaScript code into the server. When...

PT-2024-35172 · Alldata · Alldata

Name of the Vulnerable Software and Affected Versions: data.all affected versions not specified Description: The issue is related to inconsistent authorization permissions in data.all, which may allow an external actor with an authenticated account to perform restricted operations against DataSet...

PT-2024-34134 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a CVE candidate number, indicating that the...

PT-2024-34679 · Ability · Ability

Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: A permission control vulnerability is present in the ability module. Successful exploitation of this vulnerability may cause features to function abnormally. Recommendations: At the...

PT-2024-34684 · Unknown · Hdc Module

Name of the Vulnerable Software and Affected Versions: HDC module affected versions not specified Description: The issue is related to the lack of verification of input parameters in the HDC module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...

PT-2024-34690 · Unknown · Hidebug Module

Name of the Vulnerable Software and Affected Versions: hidebug module affected versions not specified Description: The issue is related to a permission control vulnerability in the hidebug module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: A...

PT-2024-34695 · Unknown · Launchanywhere

Name of the Vulnerable Software and Affected Versions: LaunchAnywhere affected versions not specified Description: The issue is related to a vulnerability in the account module of LaunchAnywhere. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At...

UBUNTU-CVE-2024-48910

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2...

PT-2024-34109

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the ksmbd component. The issue involves the xa store function, which can fail and return errors such as xa...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through list method in curd\controller\Table.php file. An attacker can manipulate SQL queries and access or modify data in the database. Remediation There is no fixed version for funadmin/funadmin. References - GitHub Issu...

PT-2024-40926 · Pqcrypto · Pqcrypto

Name of the Vulnerable Software and Affected Versions: pqcrypto crate affected versions not specified Description: The pqcrypto crate has been replaced by pqcrypto-mldsa, which provides a FIPS204-compatible implementation of ML-DSA. Recommendations: At the moment, there is no information about a...

PT-2024-35561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the drm/xe/ufence component, where the access ok function only checks for address overflow, but not for...

PT-2024-39765 · Vimesa · Vimesa Vhf/Fm Transmitter Blue Plus

Name of the Vulnerable Software and Affected Versions: VIMESA VHF/FM Transmitter Blue Plus affected versions not specified Description: The issue concerns a Denial-of-Service DoS vulnerability. An unauthenticated attacker can send an unauthorized HTTP GET request to the unprotected endpoint...

PT-2024-23198

Name of the Vulnerable Software and Affected Versions HCL Sametime affected versions not specified Description The issue concerns insecure services in-use on the UIM client by default. Specifically, an unused legacy REST service was enabled by default using the HTTP protocol. This could potential...

PT-2024-9143 · Cisco · Cisco Secure Firewall Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Management Center formerly Cisco Firepower Management Center versions affected versions not specified Description: The issue exists due to insufficient validation of user-supplied input by the web-based management...