PT-2024-35471 · Flagsmith · Flagsmith

Name of the Vulnerable Software and Affected Versions: Flagsmith versions prior to 2.134.1 Description: The issue allows bypassing the ALLOW REGISTRATION WITHOUT INVITE setting. Recommendations: For versions prior to 2.134.1, update to version 2.134.1 or later to resolve the issue...

WordPress plugin Mapster WP Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2021-3986

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they d...

CVE-2021-3841 Stored Cross-site Scripting (XSS) in sylius/sylius

sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting XSS through SVG files. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user's browser...

PT-2025-21163

Name of the Vulnerable Software and Affected Versions: Netgate pfSense CE versions prior to 2.8.0 beta release Netgate pfSense CE corresponding Plus builds versions prior to 2.8.0 beta release Description: The issue allows remote attackers to execute arbitrary JavaScript, delete backups, or leak...

CVE-2024-45670

IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism...

WordPress plugin Easy CSV Importer BETA 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

matrix-appservice-irc 安全漏洞

matrix-appservice-irc is a bridge for Matrix. This bridge passes all IRC messages to Matrix and all Matrix messages to IRC. A security vulnerability exists in matrix-appservice-irc versions prior to 3.0.3. An attacker can exploit this vulnerability to execute arbitrary IRC commands...

WordPress plugin Instant Image Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Intel PROSet/Wireless Software和Intel Killer 输入验证错误漏洞

Intel PROSet/Wireless Software and Intel Killer are both wireless network card drivers from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless Software and Intel Killer versions prior to 23.40 that originates from improper input validation. An attacker could cause a...

Intel Neural Compressor 输入验证错误漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability exists in Intel Neural Compressor versions prior to v3.0 that stems from improper input validation. An attacker exploiting the...

PT-2024-28832 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: A full path disclosure issue allows attackers to obtain the root path of the application via unspecified vectors. This could potentially be exploited to gain...

PDF Viewer Macro 安全漏洞

PDF Viewer Macro is an open source macro for XWiki SAS. It allows viewing PDF files attached to XWiki pages from within the XWiki page. A security vulnerability exists in PDF Viewer Macro prior to version 2.5.6, which stems from a PDF Viewer Macro that allows an attacker to view any attachment...

Intel Fortran 代码问题漏洞

Intel Fortran is a compiler application from Intel Corporation USA. A code issue vulnerability exists in Intel Fortran versions prior to 2021.13 that stems from an uncontrolled search path. An attacker can exploit the vulnerability to elevate privileges...

Intel QAT 安全漏洞

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...

Intel EMA 访问控制错误漏洞

Intel EMA is an application from Intel Corporation USA. designed to make Intel AMT easy to configure and use so that IT departments can manage devices equipped with Intel vPro platform technology without interrupting workflow, thereby simplifying customer management and helping to reduce manageme...

Intel Rendering Toolkits 代码问题漏洞

Intel Rendering Toolkits is a rendering toolkit from Intel Corporation USA. Accelerates these types of workloads with a set of rendering and ray tracing libraries to create high-performance, high-fidelity visual experiences. A code issue vulnerability exists in Intel Rendering Toolkits versions...

PT-2024-10083

Name of the Vulnerable Software and Affected Versions Intel QAT Engine for OpenSSL versions prior to v1.6.1 Description The issue is related to insufficient control flow management in the Intel QAT Engine for OpenSSL software, which may allow information disclosure via network access. This could...

Intel BigDL 访问控制错误漏洞

Intel BigDL is an application from Intel Corporation USA. A security vulnerability exists in Intel BigDL versions prior to 2.5.0 that stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-22640 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software for Windows versions prior to 2021.12.0 Description: The issue is related to an uncontrolled search path in some IntelR IPP software for Windows, which may allow an authenticated user to potentially enable escalation of...