Unspecified vulnerability in Linux kernel (CNVD-2024-06430)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel prior to version 6.5.9, which stems from a null pointer dereference in sendacknowledge in net/nfc/nci/spi.c. The vulnerability i...

Symantec Data Loss Prevention Security Breach

Symantec Data Loss Prevention DLP is a set of data leakage prevention solutions from Symantec Symantec. The product is primarily used to discover, monitor, and protect sensitive data, among other things. A security vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and prior...

PT-2024-13319 · Minizinc +1 · Minizinc +1

Name of the Vulnerable Software and Affected Versions: MiniZinc versions prior to 2.8.0 Description: The issue allows a NULL pointer dereference via ti expr in a crafted .mzn file. This is disputed because there is no common libminizinc use case in which an unattended process is supposed to run...

SUSE CVE-2024-0742

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

Pimcore Injection Vulnerability

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. An injection vulnerability exists in Pimcore...

CVE-2024-23183

Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated...

PT-2024-1389 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Description: The issue is related to incorrect security UI in Payments, allowing a remote attacker to potentially spoof security UI via a crafted HTML page. This could enable the attacker to bypas...

PT-2024-1390 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in Web Audio, which could allow a remote attacker to potentially exploit heap corruption via a...

PT-2024-15029 · WordPress · Product Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Enquiry for WooCommerce WordPress plugin versions prior to 3.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly...

PT-2024-13061 · Curl · Curl

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.4.0 Description: Multiple issues were addressed by updating to curl version 8.4.0. This issue is fixed in various macOS and iOS versions. Recommendations: For curl versions prior to 8.4.0, update to version 8.4.0 to...

VulnCheck KEV: CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2024-23679 Enonic XP Session Fixation Vulnerability

Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes...

PT-2024-1904 · Hitachi · Hitachi Global Link Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Global Link Manager versions prior to 8.8.7-03 Description: The issue is related to an Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows, allowing code injection. This vulnerability can be exploited...

Enonic XP License Issues Vulnerability

Enonic XP is a free and open source web application platform and content management system based on Java and Elasticsearch from Enonic, Inc. A security vulnerability exists in Enonic XP versions prior to 7.7.4 that stems from the lack of an invalid session attribute. An attacker exploiting the...

PT-2024-40547 · Mozilla · Seamonkey

Name of the Vulnerable Software and Affected Versions: Seamonkey versions prior to 2.53.18.1 Description: The issue is related to security fixes in Seamonkey. Seamonkey 2.53.18.1 uses the same backend as Firefox and contains the relevant Firefox 60.8 security fixes. It also shares most parts of t...

FusionPBX Security Vulnerabilities

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX versions prior to 5.1.0. An attacker can...

UBUNTU-CVE-2024-20967

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2024-11522 · WordPress · Contact Form & Lead Form Elementor Builder

Name of the Vulnerable Software and Affected Versions: Contact Form & Lead Form Elementor Builder WordPress plugin versions prior to 1.7.4 Description: The issue is related to the lack of authorisation and nonce checks in the plugin, which could allow any authenticated users, such as subscribers,...

PT-2024-11503 · WordPress · The Super Forms - Drag & Drop Form Builder

Name of the Vulnerable Software and Affected Versions: The Super Forms - Drag & Drop Form Builder WordPress plugin versions prior to 6.0.4 Description: The issue is related to a Reflected Cross-Site Scripting problem. The bob czy panstwa sprawa zostala rozwiazana parameter is not properly escaped...

PT-2024-11527 · WordPress · Slide Anything

Name of the Vulnerable Software and Affected Versions: Slide Anything WordPress plugin versions prior to 2.3.47 Description: The issue arises from the improper sanitization or escaping of the slide title before it is outputted in the admin pages. This allows a logged-in user with roles as low as...