PT-2025-46927

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 129.0.6668.58 Description A flaw exists in the handling of Intents in Google Chrome on Android. This issue could allow a remote attacker to perform UI spoofing by using a specially crafted HTML page...

PT-2024-30975 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app to potentially read sensitive location information due to inadequate redaction of sensitive data. This was addressed with improved redaction of sensitive information...

Mattermost Desktop App security vulnerabilities

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.8.0 and prior versions, which stems from a failure to specify an absolute path when searching for the cmd.exe file. An attacker can exploit the...

SnappyMail cross-site scripting vulnerability

SnappyMail is a simple, modern, lightweight and fast web-based e-mail client from Maarten Personal Developers. A cross-site scripting vulnerability exists in SnappyMail versions prior to v2.38.0, which stems from the cleanHtml function allowing too many invalid HTML elements. An attacker can...

SFS Consulting InsureE has a SQL injection vulnerability

SFS Consulting InsureE GL is an application from SFS Consulting. A SQL injection vulnerability exists in SFS Consulting InsureE GL versions prior to 4.6.2, which stems from an unsatisfactory neutralization of a special element that allows SQL injection...

PT-2024-37597 · Unknown · Insuree Gl

Name of the Vulnerable Software and Affected Versions: InsureE GL versions prior to 4.6.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which can be exploited by attacke...

PT-2024-6311 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2024.1 Description: The issue is related to the lack of protection of the web page structure in the integrated development environment, allowing for HTML injection via the project name. This could...

PT-2024-30964 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 iOS versions prior to 18 iPadOS versions prior to 18 Description: A permissions issue allowed a malicious app with root privileges to potentially access keyboard input and location information without user consent...

PT-2024-29114 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolv...

PT-2024-29081 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2 macOS Sequoia versions prior to 15 Description: A malicious app with root privileges may be able to modify the contents of system files due to inadequate checks. The issue was addressed with improved checks...

PT-2024-22079 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A privacy issue allowed an app to potentially read sensitive location information due to inadequate private data redaction for log entries. Recommendations: For versions prior to 15, update to macOS...

PT-2024-29103 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7 macOS versions prior to 15 Description: The issue was addressed with improved memory handling. Processing a maliciously crafted video file may lead to unexpected app termination. Recommendations: For macOS version...

WordPress plugin Spiffy Calendar has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

WordPress Plugin: FOX Code Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A code injection vulnerability...

WordPress Carousel Slider plugin < 2.2.14 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Carousel Slider versions 2.2.14...

AZL-49286 CVE-2024-46685 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...

WordPress Plugin PDF Thumbnail Generator Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting...

CVE-2024-6658

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects: Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.0 inclusive From 7.2.49.0 to 7.2.54.11 inclusive 7.2.48.12 and all prior versions Multi-Tenant...

Wibu-Systems WibuKey security vulnerability

Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems, Germany. A security vulnerability exists in Wibu-Systems WibuKey versions prior to 6.70, which arises from a boundary check that allows specially crafted packets to result in arbitrary address writes, and thus kerne...

PT-2024-37750 · WordPress · Ninjateam Header Footer Custom Code

Name of the Vulnerable Software and Affected Versions: NinjaTeam Header Footer Custom Code WordPress plugin versions prior to 1.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not...