PT-2024-26029 · Samsung · Galaxy Watch

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to access sensitive information on the Galaxy Watch. This could potentially expose user data to...

PT-2024-26045 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying binary with path, which allows local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62, upda...

PT-2024-26020 · Samsung · Samsunghealthservice

Name of the Vulnerable Software and Affected Versions: SamsungHealthService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungHealthService, allowing local attackers to bypass restrictions on starting services from the background...

DEBIAN-CVE-2024-7550

Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

WordPress WooCommerce Multiple Customer Addresses & Shipping plugin < 24.9 - Vulnerable ACF Pro plugin Embed vulnerability

Vulnerable ACF Pro plugin Embed vulnerability discovered by ? in WordPress Plugin WooCommerce Multiple Customer Addresses & Shipping versions 24.9...

PT-2024-23222 · Privx · Privx

Name of the Vulnerable Software and Affected Versions: PrivX versions prior to 34.0 Description: The issue allows data exfiltration and denial of service via the REST API. Recommendations: For versions prior to 34.0, update to version 34.0 or later to resolve the issue. Alternatively, for earlier...

HP Poly Clariti Manager devices 安全漏洞

HP Poly Clariti Manager devices is a device management system from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Poly Clariti Manager devices version 10.10.2.2 and prior versions, which stems from an inability to properly clean up user input...

PT-2024-25800 · Unjs/Ufo +1 · Unjs/Ufo +1

Name of the Vulnerable Software and Affected Versions: Nuxt versions prior to 3.12.4 Description: The navigateTo function does not correctly use APIs provided by unjs/ufo, leading to parsing discrepancies. The function first checks if a URL has a protocol using the unjs/ufo package, which works...

CVE-2024-38490

Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...

PT-2024-28594 · Uncanny Owl · Uncanny Owl Tin Canny Reporting

Name of the Vulnerable Software and Affected Versions: Uncanny Owl Tin Canny Reporting for LearnDash versions prior to 4.3.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Vim 安全漏洞

Vim is a cross-platform text editor from the Vim open source. A security vulnerability exists in versions prior to Vim v9.1.0647, which stems from the presence of post-release reuse...

PT-2024-28580 · Unknown · Registrationmagic

Name of the Vulnerable Software and Affected Versions: RegistrationMagic versions prior to 6.0.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a Stored XSS vulnerability in the...

CVE-2024-37142

Dell Peripheral Manager is affected in versions prior to 1.7.6 by an uncontrolled search path element vulnerability. The underlying issue is exposure to preloading malicious DLLs or symbolic links, which could enable arbitrary code execution and privilege escalation locally. Affected software: De...

Lenovo PC Manager 安全漏洞

Lenovo PC Manager is a PC management software from Lenovo China. A security vulnerability exists in Lenovo PC Manager versions prior to 2.8.90.11211, which originates from a vulnerability that could allow a local attacker to elevate privileges...

Cato Networks Windows SDP Client 安全漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34 that stems from a local root certificate that can be installed by a user with low privileges...

PT-2024-38166

Name of the Vulnerable Software and Affected Versions: eWeLink Cloud Service versions prior to 2.19.0 eWeLink Cloud Service versions up to 2.18.x Description: When a device is shared, the homepage module in eWeLink Cloud Service allows a secondary user to take over devices as a primary user by...

PT-2024-10758 · Lenovo · Lenovo Pcmanager

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager versions prior to 2.8.90.11211 Description: A local attacker could exploit the issue to escalate privileges. Recommendations: For versions prior to 2.8.90.11211, update to version 2.8.90.11211 or later to resolve the issue...

WordPress plugin Donation Block For PayPal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-35330 · Akana · Akana Api Platform

Name of the Vulnerable Software and Affected Versions: Akana API Platform versions prior to 2024.1.0 Description: The issue allows SAML tokens to be replayed. Recommendations: For versions prior to 2024.1.0, update to version 2024.1.0 or later to resolve the issue...