PT-2024-26994 · Targit · Targit Decision Suite

Name of the Vulnerable Software and Affected Versions: TARGIT Decision Suite versions prior to 24.06.19002 Description: The issue allows authenticated attackers to read or write to server files via a crafted file request, potentially enabling code execution via a .xview file. Recommendations: For...

PT-2024-3966 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03.2 Description: The issue is related to insufficient authorization procedures in the continuous integration and continuous delivery CI/CD system, allowing users to perform actions that should not be...

ZKsync Era 安全漏洞

ZKsync Era is an open source compiler from Matter Labs. A security vulnerability exists in ZKsync Era versions prior to 1.3.10, which stems from checkifaexeculatedlast exposing a bug in the order in which Yul function arguments are evaluated...

PT-2024-4243 · Google +6 · Google Chrome +7

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially perform out of...

xmedcon 安全漏洞

xmedcon is an open source toolkit for medical image conversion from xmedcon open source. A security vulnerability exists in versions prior to xmedcon v.0.24.0, which stems from vulnerability to buffer overflows that could allow an attacker to execute arbitrary code...

PT-2024-25435 · WordPress · All In One Seo

Name of the Vulnerable Software and Affected Versions: All in One SEO WordPress plugin versions prior to 4.6.1.1 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin not validating and escaping some of its Post...

Aqua Security Trivy 安全漏洞

Aqua Security Trivy is a comprehensive and versatile security scanner from Aqua Security. A security vulnerability exists in Aqua Security Trivy versions prior to 0.51.2, which stems from a potential leak of registry credentials when scanning images from a malicious registry...

PT-2024-23984 · Cozmoslabs · Cozmoslabs Profile Builder

Name of the Vulnerable Software and Affected Versions: Cozmoslabs Profile Builder versions prior to 3.11.2 Description: The issue is related to Insufficient Verification of Data Authenticity, allowing Functionality Bypass in Cozmoslabs Profile Builder. Recommendations: For versions prior to 3.11....

PT-2024-23470 · Unknown · Guido Vs Contact Form

Name of the Vulnerable Software and Affected Versions: Guido VS Contact Form versions prior to 14.7 Description: A Guessable CAPTCHA vulnerability in Guido VS Contact Form allows functionality bypass. Recommendations: For Guido VS Contact Form versions prior to 14.7, update to a version that...

WordPress plugin WordPress Manutenção 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin Shortcodes and extra features for Phlox theme 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Shortcodes and extra...

WordPress plugin GiveWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin VS Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. A...

PT-2024-12894 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.20 Description: A race condition in the IntelR PROSet/Wireless WiFi software for Windows may allow an unauthenticated user to potentially enable denial of service via...

PT-2024-12754 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.20 Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This...

PT-2024-13132 · Intel · Intel(R) Gpa Framework

Name of the Vulnerable Software and Affected Versions: IntelR GPA Framework software versions prior to 2023.3 Description: The issue is related to improper access control in some IntelR GPA Framework software installers, which may allow an authenticated user to potentially enable escalation of...

VulnCheck KEV: CVE-2022-1883

SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0...

AZL-42013 CVE-2024-32021 affecting package git for versions less than 2.39.4-1

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target reposito...

AZL-40621 CVE-2024-32614 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

WordPress plugin Barcode Scanner with Inventory & Order Manager 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...