WordPress plugin Easy CSV Importer BETA: Code issues and vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

matrix-appservice-irc security vulnerability

matrix-appservice-irc is a bridge for Matrix. This bridge passes all IRC messages to Matrix and all Matrix messages to IRC. A security vulnerability exists in matrix-appservice-irc versions prior to 3.0.3. An attacker can exploit this vulnerability to execute arbitrary IRC commands...

Intel Fortran code issues and vulnerabilities

Intel Fortran is a compiler application from Intel Corporation USA. A code issue vulnerability exists in Intel Fortran versions prior to 2021.13 that stems from an uncontrolled search path. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-28832 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: A full path disclosure issue allows attackers to obtain the root path of the application via unspecified vectors. This could potentially be exploited to gain...

Intel Rendering Toolkits code-related vulnerabilities

Intel Rendering Toolkits is a rendering toolkit from Intel Corporation USA. Accelerates these types of workloads with a set of rendering and ray tracing libraries to create high-performance, high-fidelity visual experiences. A code issue vulnerability exists in Intel Rendering Toolkits versions...

PT-2024-22640 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software for Windows versions prior to 2021.12.0 Description: The issue is related to an uncontrolled search path in some IntelR IPP software for Windows, which may allow an authenticated user to potentially enable escalation of...

Intel PROSet/Wireless Software and Intel Killer: input validation vulnerabilities

Intel PROSet/Wireless Software and Intel Killer are both wireless network card drivers from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless Software and Intel Killer versions prior to 23.40 that originates from improper input validation. An attacker could cause a...

Intel Neural Compressor input validation error vulnerability

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability exists in Intel Neural Compressor versions prior to v3.0 that stems from improper input validation. An attacker exploiting the...

Intel BigDL Access Control Vulnerability

Intel BigDL is an application from Intel Corporation USA. A security vulnerability exists in Intel BigDL versions prior to 2.5.0 that stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

Intel EMA Access Control Vulnerability

Intel EMA is an application from Intel Corporation USA. designed to make Intel AMT easy to configure and use so that IT departments can manage devices equipped with Intel vPro platform technology without interrupting workflow, thereby simplifying customer management and helping to reduce manageme...

PDF Viewer Macro Security Vulnerability

PDF Viewer Macro is an open source macro for XWiki SAS. It allows viewing PDF files attached to XWiki pages from within the XWiki page. A security vulnerability exists in PDF Viewer Macro prior to version 2.5.6, which stems from a PDF Viewer Macro that allows an attacker to view any attachment...

Intel QAT security vulnerabilities

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...

PT-2024-10083

Name of the Vulnerable Software and Affected Versions Intel QAT Engine for OpenSSL versions prior to v1.6.1 Description The issue is related to insufficient control flow management in the Intel QAT Engine for OpenSSL software, which may allow information disclosure via network access. This could...

PT-2024-8717 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V3.0 SP1 Description: A vulnerability has been identified in the affected application, which contains a database function that does not properly restrict the permissions of users to write to the filesystem of the...

PT-2024-8686 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable...

PT-2024-34144 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.6 Description: The issue is an out-of-bounds read vulnerability that allows a remote unauthenticated attacker to leak sensitive information in memory. Recommendations: For versions prior to 6.4.6, update...

PT-2024-39880 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.7R4 Description: The issue allows a local authenticated attacker to create arbitrary folders due to incorrect permissions. Recommendations: For versions prior to 22.7R4, update to version 22.7R...

PT-2025-25867

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.137 Description A problem has been identified in the Linux kernel where a sleeping function is called from an invalid context. This issue occurs when the console lock function is called while holding a...

PT-2024-38788

Name of the Vulnerable Software and Affected Versions: Nomysem versions prior to 13.10.2024 Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations: For versions prior to 13.10.2024, update to a version released aft...

FreeScout security vulnerabilities

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout, Inc. A security vulnerability exists in versions of FreeScout prior to 1.0.65. An attacker can exploit the vulnerability to authenticate as an arbitrary user...