PT-2024-23984 · Cozmoslabs · Cozmoslabs Profile Builder

Name of the Vulnerable Software and Affected Versions: Cozmoslabs Profile Builder versions prior to 3.11.2 Description: The issue is related to Insufficient Verification of Data Authenticity, allowing Functionality Bypass in Cozmoslabs Profile Builder. Recommendations: For versions prior to 3.11....

WordPress plugin – WordPress Maintenance security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin Shortcodes and additional features for Phlox theme – Path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Shortcodes and extra...

WordPress plugin vs. Contact Form security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. A...

PT-2024-23470 · Unknown · Guido Vs Contact Form

Name of the Vulnerable Software and Affected Versions: Guido VS Contact Form versions prior to 14.7 Description: A Guessable CAPTCHA vulnerability in Guido VS Contact Form allows functionality bypass. Recommendations: For Guido VS Contact Form versions prior to 14.7, update to a version that...

SUSE CVE-2024-4761

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

PT-2024-19050 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition Design software versions prior to 23.4 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2024-12754

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.20 Description Improper input validation in some IntelR PROSet/Wireless WiFi software for Windows may allow an unauthenticated user to potentially enable a denial of service...

PT-2024-12894 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.20 Description: A race condition in the IntelR PROSet/Wireless WiFi software for Windows may allow an unauthenticated user to potentially enable denial of service via...

PT-2024-13132 · Intel · Intel(R) Gpa Framework

Name of the Vulnerable Software and Affected Versions: IntelR GPA Framework software versions prior to 2023.3 Description: The issue is related to improper access control in some IntelR GPA Framework software installers, which may allow an authenticated user to potentially enable escalation of...

Intel Graphics Performance Analyzers security vulnerabilities

Intel Graphics Performance Analyzers Intel GPA is a graphics performance analyzer from Intel Corporation USA. A security vulnerability exists in Intel Graphics Performance Analyzers prior to version 2023.3 that stems from an incorrect default permissions issue. It could allow an authenticated use...

PT-2024-19080

Name of the Vulnerable Software and Affected Versions IntelR Processor Diagnostic Tool versions prior to 4.1.9.41 Description The issue is related to an uncontrolled search path in the IntelR Processor Diagnostic Tool software. This may allow an authenticated user to potentially enable escalation...

PT-2024-12859 · Intel · Intel(R) Cst

Name of the Vulnerable Software and Affected Versions: IntelR CST software versions prior to 2.1.10300 Description: The issue is related to an uncontrolled search path in some IntelR CST software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel PROSet/Wireless WiFi Software security vulnerabilities

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software prior to version 23.20 that stems from an incorrect input validation issue. It could allow an unauthenticated user to conduct a...

Progress Software Telerik Report Server security vulnerabilities

Progress Software Telerik Report Server is an enterprise-level report management and distribution solution from Progress Software. A security vulnerability exists in versions prior to Progress Software Telerik Report Server 2024 Q2 18.1.24.514. An attacker could exploit the vulnerability to...

VulnCheck KEV: CVE-2022-1883

SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0...

AZL-42013 CVE-2024-32021 affecting package git for versions less than 2.39.4-1

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target reposito...

CVE-2024-4773

The Firefox web browser (versions earlier than 126 ) is vulnerable to a flaw where a network error during page loading causes the prior content to remain visible while the URL bar is blank. This condition could be exploited by an attacker to obfuscate a spoofed website . Specific versions includi...

AZL-40621 CVE-2024-32614 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

WordPress Plugin Barcode Scanner with Inventory & Order Manager has a vulnerability related to information leakage

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...