FreeScout 安全漏洞

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout, Inc. A security vulnerability exists in versions of FreeScout prior to 1.0.65. An attacker can exploit the vulnerability to authenticate as an arbitrary user...

PT-2024-39880 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.7R4 Description: The issue allows a local authenticated attacker to create arbitrary folders due to incorrect permissions. Recommendations: For versions prior to 22.7R4, update to version 22.7R...

PT-2025-25867

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.137 Description A problem has been identified in the Linux kernel where a sleeping function is called from an invalid context. This issue occurs when the console lock function is called while holding a...

PT-2024-38788

Name of the Vulnerable Software and Affected Versions: Nomysem versions prior to 13.10.2024 Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations: For versions prior to 13.10.2024, update to a version released aft...

PT-2024-34144 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.6 Description: The issue is an out-of-bounds read vulnerability that allows a remote unauthenticated attacker to leak sensitive information in memory. Recommendations: For versions prior to 6.4.6, update...

PT-2024-34880 · Element · Element Desktop +1

Name of the Vulnerable Software and Affected Versions: Element Web and Desktop versions prior to 1.11.85 Description: The issue concerns the handling of thumbnails for attachments, stickers, and images. Specifically, versions of Element Web and Desktop earlier than 1.11.85 do not check if these...

PT-2024-8686 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable...

PT-2024-8717 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V3.0 SP1 Description: A vulnerability has been identified in the affected application, which contains a database function that does not properly restrict the permissions of users to write to the filesystem of the...

CVE-2024-10345

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Karol Więsek...

Grand Vice info Webopac 代码问题漏洞

Grand Vice info Webopac is an online public access catalog from China XinXueYing Info Grand Vice info. It is used for users to access library services over the Internet. A code issue vulnerability exists in Grand Vice info Webopac version 6.x prior to 6.5.1 and version 7.x prior to 7.2.3, which...

libsoup 安全漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup versions prior to 3.6.0, which stems from allowing HTTP request smuggling in certain configurations...

PT-2024-35152 · Unknown · Stirling-Pdf

Name of the Vulnerable Software and Affected Versions: Stirling-PDF versions prior to 0.32.0 Description: The issue in Stirling-PDF allows any unauthenticated user to execute JavaScript code in the context of the user due to the Merge functionality taking untrusted user input file name and using ...

PT-2024-28234 · Cloud Foundry · Cf-Deployment +1

Name of the Vulnerable Software and Affected Versions: Cloud Foundry Capi Release versions prior to 1.194.0 Cloud Foundry cf-deployment versions prior to v44.1.0 Description: The issue allows authenticated users to upload specifically crafted files, potentially leading to a denial of service atta...

AZL-53313 CVE-2024-50256 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfrejectipv6: fix potential crash in nfsendreset6 I got a syzbot report without a repro 1 crashing in nfsendreset6 I think the issue is that dev-hardheaderlen is zero, and we attempt later to push an Ethernet header. U...

WordPress plugin Saragna 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2024-34865 · Unknown · Simplistic Seo

Name of the Vulnerable Software and Affected Versions: Simplistic SEO versions prior to 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...

WordPress plugin WP EIS SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin TeleAdmin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

AZL-53709 CVE-2024-50150 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent device, but without keeping a reference to it. When registering the altmode, get a reference to the parent and put it in the...

Logpoint 安全漏洞

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0 that stems from a lack of proper authorization checks on endpoints used to create, edit, or delete third-party authentication modules, allowing...