CVE-2024-27767 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication

CWE-287: Improper Authentication may allow Authentication Bypass...

PT-2024-2924 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to an out-of-bounds read vulnerability in the WLAvalancheService component. This vulnerability can allow an unauthenticated remote attacker to read sensitive informati...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

PT-2024-2273 · Unitronics · Unilogic

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to the use of less trusted sources, which may allow remote code execution. Exploitation of this issue could enable a remote attacker to execute arbitra...

Unitronics Unistream Unilogic Trust Management Issues Vulnerabilities

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which stems from the...

PT-2024-22614

Name of the Vulnerable Software and Affected Versions django-wiki versions prior to 0.10.1 Description The issue allows maliciously crafted article content to cause severe use of server CPU through a regular expression loop. This can be exploited by anonymous users creating or editing articles. T...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. A path traversal vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which...

PT-2024-2268 · Unitronics · Unilogic

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to errors in processing relative path to directory, which can allow a remote attacker to bypass security restrictions and execute arbitrary code. This ...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

PT-2024-21648 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.13 Description: GLPI is a Free Asset and IT Management Software package that includes features such as data center management, ITIL Service Desk, licenses tracking, and software auditing. An authenticated user can...

PT-2024-2442 · Black +1 · Black +1

Name of the Vulnerable Software and Affected Versions: black versions prior to 24.3.0 Description: The issue is related to a Regular Expression Denial of Service ReDoS vulnerability via the lines with leading tabs expanded function in the strings.py file. An attacker could exploit this by craftin...

Autodesk FBX Review Buffer Error Vulnerability

Autodesk FBX Review is a software application from the American company Autodesk, Inc. A lightweight, standalone software tool for fast, efficient viewing of 3D assets and animations. A buffer error vulnerability exists in Autodesk FBX Review 1.5.3.0 and prior versions, which stems from the...

WordPress plugin SoundCloud Shortcode cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-22316

Name of the Vulnerable Software and Affected Versions turbo boost-commands versions prior to 0.1.3 turbo boost-commands versions prior to 0.2.2 Description TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the...

PT-2024-2214 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.13 Description: The issue is related to a SQL injection vulnerability in the search engine of GLPI, a Free Asset and IT Management Software package. An authenticated user can exploit this vulnerability to extract...

Zoom Rooms Security Breach

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Client versions prior to 5.17.5, which stems from a race condition in the...

PT-2024-22330 · Unknown · Yourspotify

Name of the Vulnerable Software and Affected Versions: YourSpotify versions prior to 1.9.0 Description: The issue concerns a clickjacking vulnerability that can be used to trick an existing user into triggering actions, such as allowing signup of other users or deleting the current user account...

PT-2024-2326 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.13 Description: The issue is related to insufficient authorization procedure in GLPI, a free asset and IT management software package. This allows an authenticated user to access sensitive fields data from items on...

WordPress Plugin CWW Companion Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Peering Manager Security Vulnerability

Peering Manager is a BGP session management tool. A security vulnerability exists in Peering Manager 1.8.2 and prior versions that stems from the presence of a server template injection vulnerability. An attacker can exploit this vulnerability to execute remote code...