PT-2024-27302 · Unknown · Wishlist Member

Name of the Vulnerable Software and Affected Versions: WishList Member X versions prior to 3.26.7 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the Membership Software. Recommendations: For versions prior to 3.26.7, update to version 3.26.7 o...

AZL-42925 CVE-2024-39331 affecting package emacs for versions less than 29.4-1

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5...

PT-2024-28455

Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate Core versions prior to 9.8 build 9858 Description: The issue allows for authentication bypass. Recommendations: For versions prior to 9.8 build 9858, update to version 9.8 build 9858 or later to resolve the issue...

PT-2024-28454 · Mendelson · Mendelson As4

Name of the Vulnerable Software and Affected Versions: MENDELSON AS4 versions prior to 2024 B376 Description: The issue arises when a trading partner provides prepared XML data, exploiting a client-side vulnerability. This allows files to be written to the computer running the client process when...

PT-2024-31915 · WordPress · Widget Bundle

Name of the Vulnerable Software and Affected Versions: Widget Bundle WordPress plugin versions prior to 2.0.1 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

PT-2024-28249 · Typo3 · Friendlycaptcha Official

Name of the Vulnerable Software and Affected Versions: friendlycaptcha official extension versions prior to 0.1.4 for TYPO3 Description: The issue allows a remote user to bypass the captcha check due to the extension's failure to verify the captcha field in submitted form data. This specifically...

CVE-2024-37343 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.06. Attackers with valid tunnel credentials can pass a limited-length script to the administrative console which is then temporarily stored where an administrato...

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

Absolute Secure Access Security Vulnerability

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...

PT-2024-8850 · Intel · Intel Driver & Support Assistant

Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant versions prior to 24.3.26.8 Description: The issue is related to improper access control in Intel Driver & Support Assistant, which may allow an authenticated user to potentially enable escalation of privilege...

WordPress plugin Astra Bulk Edit security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin Elementor Pro security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-8812

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition software for Windows versions prior to 24.2 Description: The issue is related to an uncontrolled search path in the Intel Quartus Prime Pro software, which may allow an authenticated user to potentially enabl...

PT-2024-4378

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.114 Microsoft Edge affected versions not specified Description The issue is related to an inappropriate implementation in V8, allowing a remote attacker to perform out of bounds memory access via a...

PT-2024-27463 · Unknown +1 · Oqs-Provider +1

Name of the Vulnerable Software and Affected Versions: oqs-provider versions prior to 0.6.1 Description: The issue arises from the way oqs-provider handles lengths decoded with DECODE UINT32 at the start of serialized hybrid keys and signatures. Unchecked length values are later used for memory...

PT-2024-27076 · Unknown · Js-Object-Resolver

Name of the Vulnerable Software and Affected Versions: js-object-resolver versions prior to 3.1.1 Description: The issue allows for Prototype Pollution via the setNestedProperty function of the Module. This can potentially lead to unintended behavior or security issues. Recommendations: For...

PT-2024-26947 · Freefrom · Freefrom

Name of the Vulnerable Software and Affected Versions: FreeFrom - the nostr client versions prior to 1.3.5 Description: The issue exists due to reliance on obfuscation or encryption of security-relevant inputs without integrity checking. If exploited, the content of direct messages between users...

FreeFrom Security Vulnerabilities

FreeFrom is an application from FreeFrom, Inc. dedicated to bringing privacy and free speech back to SNSs. A security vulnerability exists in FreeFrom versions prior to 1.3.5, which stems from improper application cryptographic signature validation that fails to detect event data with invalid...

Firefly III Security Vulnerability

Firefly III is an open source personal finance management system. A security vulnerability exists in Firefly III versions prior to 6.1.17, which stems from a vulnerability that could allow a malicious user to bypass multiple authentication checks...