PT-2024-14141 · Unknown · Eazy Plugin Manager

Name of the Vulnerable Software and Affected Versions: Eazy Plugin Manager versions n/a through 4.1.2 Description: The issue is related to an Improper Authentication vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through...

PT-2024-12015

Name of the Vulnerable Software and Affected Versions Quiz Maker versions n/a through 6.3.9.4 Description The issue is related to a Missing Authorization vulnerability in the Quiz Maker team Quiz Maker. Recommendations For versions n/a through 6.3.9.4, at the moment, there is no information about...

CVE-2024-2730

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available...

PT-2024-2850 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could allow an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScri...

PT-2024-12374 · Qualcomm · 215 Mobile Firmware +307

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while processing the finish sign command, specifically when attempting to pass a rsp buffer. This can...

PT-2024-23438 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon booking system versions n/a through 9.5 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Salon booking system. Recommendations: For versions n/a through 9.5, update to a version...

PT-2024-21233 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited through the /amssplus/admin/index.php endpoint...

PT-2024-19958 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: An SQL injection issue exists in an undisclosed page of the BIG-IP Configuration utility. The exact nature of the issue and its potential impact are not fully detailed, but it suggests a...

PT-2024-13275 · Ibm · Ibm Sametime

Name of the Vulnerable Software and Affected Versions: IBM Sametime affected versions not specified Description: The issue concerns sensitive information being passed in URLs, potentially exposing it. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-2024-6391 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.2.1 Description: The issue is related to a Use-After-Free UAF vulnerability in the dasher configure pid function. This vulnerability can be exploited by a remote attacker to cause a denial of service. The dasher configure pid...

PT-2024-13903 · Ibm · Ibm Powersc

Name of the Vulnerable Software and Affected Versions: IBM PowerSC versions 1.3 through 2.1 Description: The issue is related to an inadequate account lockout setting in IBM PowerSC, which could allow a remote attacker to brute force account credentials. Recommendations: For versions 1.3 through...

Fedora 39 : dnsmasq (2024-b359bbdf87)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b359bbdf87 advisory. Change initial configuration to use local-service=host for initial listening on localhost. It auto- disables itself as soon as other explicit interface or...

CVE-2022-41409

A flaw was found in PCRE2, where it is susceptible to an integer overflow vulnerability triggered by a negative repeat value in the pcre2test subject line that causes infinite looping. This flaw allows a remote attacker to pass specially crafted data to the application, initiating an integer...

PT-2024-13549 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the angel coffee mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: Fo...

PT-2024-15232 · Unknown · Uniway Router

Name of the Vulnerable Software and Affected Versions: Uniway Router versions up to 2.0 Description: A critical issue affects some unknown functionality of the file /boaform/device reset.cgi of the component Device Reset Handler, leading to denial of service. The attack may be launched remotely...

PT-2024-14422 · Unknown · Webvitaly Iframe

Name of the Vulnerable Software and Affected Versions: webvitaly iframe versions n/a through 4.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For webvitaly...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Intern Membership Management System Cross-Site Scripting Vulnerability

Intern Membership Management System is an intern membership management system. A cross-site scripting vulnerability exists in Intern Membership Management System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

PT-2023-30485 · Unknown · Event Monster – Event Management

Name of the Vulnerable Software and Affected Versions: Event Monster – Event Management, Tickets Booking, Upcoming Event versions n/a through 1.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

CVE-2023-47619

CVE-2023-47619 affects Audiobookshelf up to v2.4.3. The vulnerability allows users with the update permission to read arbitrary files, delete arbitrary files, and make GET requests to arbitrary URLs and read the responses, leading to Information Disclosure. There are no patches listed in the prov...