PT-2024-35155

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2024.8.5 authentik version 2024.8.5 and 2024.10.3 are not affected, but all versions prior to 2024.8.5 are vulnerable. However, the correct interpretation is that versions prior to 2024.8.5 are affected. Corrected...

WordPress plugin Taskbuilder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Broadcom SANnav 日志信息泄露漏洞

Broadcom SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A log information disclosure vulnerability exists in Broadcom SANnav versions prior to 2.2.2, which originates from logging Fabric OS switch passwords when debugging is enabled, which could lead to the disclosur...

CVE-2024-11404

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in django CMS Association django Filer allows Input Data Manipulation, Stored XSS. This issue affects django Filer: from 3 before 3.3...

PT-2024-16799 · M Files · M-Files Aino

Name of the Vulnerable Software and Affected Versions: M-Files Aino versions prior to 24.10 Description: The issue is related to improper access control, allowing an authenticated user to access object information due to an incorrect calculation of effective permissions. Recommendations: For...

WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability

Account Takeover vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Wawp versions 3.0.18...

PT-2024-35035 · Unknown · Imforza Wp Listings Pro

Name of the Vulnerable Software and Affected Versions: imFORZA WP Listings Pro versions prior to 3.0.15 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. This allows...

WordPress plugin Custom Dashboard Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin Bg Patriarchia BU 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin TinyCode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Veritas Enterprise Vault 安全漏洞

Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communications platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.1 UPD882911, which stems from a vulnerability that allows an authenticated,...

PT-2024-35489 · Unknown · Bitcoin Core

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 25.0 Description: The issue allows a peer to affect the download state of other peers by sending a mutated block. This can potentially disrupt the normal functioning of the Bitcoin network. Recommendations: For...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker exploiting this vulnerability could cause a denial of service memory consumption via a specially crafted...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker exploiting this vulnerability could cause a denial of service infinite loop via a malformed GETDATA messa...

Veritas Enterprise Vault 安全漏洞

Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communications platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.1 UPD882911, which stems from a vulnerability that allows an authenticated,...

RSA Security NetWitness Platform 安全漏洞

RSA Security NetWitness Platform is a comprehensive platform from RSA Security USA that accelerates threat detection and response. It collects and analyzes data from all capture points logs, packets, netflow, endpoints, and IoT and compute platforms physical, virtual, and cloud, enriching data wi...

PT-2024-35480 · Unknown · Bitcoin Core

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 0.21.0 Description: The issue arises from an integer overflow when calculating the time offset for newly connecting peers, combined with an abs64 logic bug. This can lead to a network split. Recommendations: For...

Egebilgi Software Website Template SQL注入漏洞

Egebilgi Software Website Template is a series of website templates from Egebilgi Software. A SQL injection vulnerability exists in versions of Egebilgi Software Website Template prior to 29.04.2024, which stems from the use of incorrect special element neutralization, which can lead to SQL...

WordPress plugin Provide Forex Signals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

Apache HertzBeat 命令注入漏洞

Apache HertzBeat is a tool from the American company Apache Apache that can monitor various components. A command injection vulnerability exists in Apache HertzBeat versions prior to 1.6.1, which stems from the application's failure to properly filter constructed command special characters,...