WordPress plugin Tickera – WordPress Event Ticketing 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Tickera -...

PT-2024-16428 · Fluent Forms · Contact Form Plugin By Fluent Forms

Name of the Vulnerable Software and Affected Versions: Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder versions prior to 5.2.6 Description: The issue is related to Stored Cross-Site Scripting via the form's subject parameter due to insufficient input...

PT-2024-36146 · Unknown · Imagerecycle Pdf & Image Compression

Name of the Vulnerable Software and Affected Versions: ImageRecycle pdf & image compression versions prior to 3.1.17 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This problem affects the...

PT-2024-13004 · Miniorange · Miniorange Saml Sp Single Sign On

Name of the Vulnerable Software and Affected Versions: miniOrange SAML SP Single Sign On versions prior to 5.0.4 Description: The issue affects the miniOrange SAML SP Single Sign On plugin, allowing for broken access control due to missing authorization. This enables exploitation of incorrectly...

WordPress plugin ListApp Mobile Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

WordPress plugin ReDi Restaurant Reservation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin The Events Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-36603 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.2.10 Description: A vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an iframe element without user...

PT-2024-9589 · Ucum-Java · Ucum-Java

Name of the Vulnerable Software and Affected Versions: Ucum-java versions prior to 1.0.9 Description: The issue is related to XML external entity injections in the UcumEssenceService. This occurs when XML parsing is performed, allowing a malicious DTD tag in a processed XML file to produce XML...

PT-2024-36610 · Unknown · Graphics::Colornames

Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...

Apple macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.2. An attacker exploiting the vulnerability can access encrypted volumes...

Apple macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.2. An attacker exploiting the vulnerability can access arbitrary files...

PT-2024-36370 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue may allow an attacker to cause unexpected system termination or arbitrary code execution in DCP firmware...

PT-2024-39883 · Ivanti · Ivanti Automation

Name of the Vulnerable Software and Affected Versions: Ivanti Automation versions prior to 2024.4.0.1 Description: Under specific circumstances, insecure permissions in Ivanti Automation allow a local authenticated attacker to achieve local privilege escalation. Recommendations: For versions prio...

PT-2024-39056 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions prior to 10.18.40.0 Description: Under specific circumstances, insecure permissions in Ivanti Workspace Control allow a local authenticated attacker to achieve local privilege escalation. Recommendations: For...

DuckDB < 1.1.0 Unauthorized Filesystem Read (CVE-2024-41672)

The version of DuckDB installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-41672 advisory. - In versions 1.0.0 and prior, content in filesystem is accessible for reading using 'sniffcsv', even with 'enableexternalaccess=false'. This vulnerability provides an...

Schneider Electric PowerChute Serial Shutdown 授权问题漏洞

Schneider Electric PowerChute Serial Shutdown is a UPS management, normal shutdown, and energy management software from Schneider Electric France. An authorization issue vulnerability exists in Schneider Electric PowerChute Serial Shutdown version v1.2.0.301 and prior versions, which stems from...

PT-2024-36342 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: A logic issue was addressed with improved state management, potentially allowing an app to elevate privileges. Recommendations: For versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the...

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a forced deadlock caused by improper password character length checking...