PT-2024-13061 · Curl · Curl

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.4.0 Description: Multiple issues were addressed by updating to curl version 8.4.0. This issue is fixed in various macOS and iOS versions. Recommendations: For curl versions prior to 8.4.0, update to version 8.4.0 to...

PT-2024-40547 · Mozilla · Seamonkey

Name of the Vulnerable Software and Affected Versions: Seamonkey versions prior to 2.53.18.1 Description: The issue is related to security fixes in Seamonkey. Seamonkey 2.53.18.1 uses the same backend as Firefox and contains the relevant Firefox 60.8 security fixes. It also shares most parts of t...

FusionPBX Security Vulnerabilities

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX versions prior to 5.1.0. An attacker can...

UBUNTU-CVE-2024-20967

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2024-11527 · WordPress · Slide Anything

Name of the Vulnerable Software and Affected Versions: Slide Anything WordPress plugin versions prior to 2.3.47 Description: The issue arises from the improper sanitization or escaping of the slide title before it is outputted in the admin pages. This allows a logged-in user with roles as low as...

PT-2024-15164 · WordPress · Jsm File Get Contents() Shortcode

Name of the Vulnerable Software and Affected Versions: JSM file get contents Shortcode WordPress plugin versions prior to 2.7.1 Description: The issue concerns a lack of validation for one of the shortcode's parameters in the JSM file get contents Shortcode WordPress plugin. This could allow user...

AZL-43054 CVE-2023-6683 affecting package qemu for versions less than 8.2.0-13

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemuclipboardrequest function can be reached before vncservercuttextcaps was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a maliciou...

Hongdian Router H8951-4G-ESP Trust Management Issues Vulnerability

The Hongdian Router H8951-4G-ESP is a wireless router from China Hongdian. A security vulnerability exists in versions prior to Hongdian Router H8951-4G-ESP 2310271149 that stems from the use of hard-coded passwords...

Wazuh Security Breach

Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A security vulnerability exists in Wazuh versions prior to 4.5.3 that stems from the presence of a stack overflow...

WordPress Plugin GTG Product Feed for Shopping Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-15460 · Unknown · Ens Control

Name of the Vulnerable Software and Affected Versions: ENS Control browser extension versions prior to 10.7.0 Update 15 Description: A content-security-policy vulnerability allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-on...

PT-2024-1333 · Intel · Intel Nuc Bios

Name of the Vulnerable Software and Affected Versions: Intel NUC BIOS firmware versions prior to IN0048 Description: The issue is related to improper input validation in the Intel NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-19252 · Splunk · Splunk Enterprise Security

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise Security ES versions prior to 7.1.2 Description: The issue allows an attacker to perform a denial of service DoS to the Investigation by using investigation attachments. This is possible because the attachment endpoint does...

PT-2024-14886 · WordPress · Essential Real Estate

Name of the Vulnerable Software and Affected Versions: The Essential Real Estate WordPress plugin versions prior to 4.4.0 Description: The issue arises from the plugin not applying proper capability checks on its AJAX actions. This allows attackers with a subscriber account to conduct Denial of...

QNAP Systems QcalAgent Operating System Command Injection Vulnerability

QNAP Systems QcalAgent is a time management center from QNAP Systems. It is used to manage personal schedules, share calendars with others, and share each other's schedules. A security vulnerability exists in QNAP Systems QcalAgent prior to version 1.1.8 that stems from the presence of an operati...

PT-2024-14516 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: A heap buffer overflow flaw exists in the paddle.repeat interleave function. This issue can lead to a denial of service, information disclosure, or potentially more severe damage...

PT-2024-14514 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a stack overflow in paddle.linalg.lu unpack that can lead to a denial of service or potentially more severe consequences. Recommendations: For versions prior to 2.6.0, update to...

PT-2024-12757 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: This issue can cause a runtime crash and a denial of service. It is related to a flaw in the paddle.linalg.matrix rank function. Recommendations: For versions prior to 2.6.0, update to version...

ZTE ZXCLOUD iRAI Code Issue Vulnerability

The ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.23.23 and prior versions, which stems from the program's inability to adequately validate user input. An attacker can exploit the vulnerability to elevate...

PT-2024-14518 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a command injection in the wget download function, allowing the execution of arbitrary commands on the operating system. Recommendations: For versions prior to 2.6.0, update to...