PT-2024-37354

Name of the Vulnerable Software and Affected Versions: Phloc Webscopes version 7.0.0 Description: An information disclosure issue allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information. Recommendations: For Phloc...

PT-2024-26278 · Unknown · Rsi Pdf/Html Catalog Evolution

Name of the Vulnerable Software and Affected Versions: RSI PDF/HTML catalog evolution prestapdf versions = 7.0.0 Description: A SQL injection issue exists, allowing a guest to perform SQL injection via the PrestaPDFProductListModuleFrontController::queryDb function. Recommendations: For versions ...

org.sonarsource.sonarqube:sonar-application (>=6.2 <=7.0-RC1) potentially affected by CVE-2024-38460 via org.sonarsource.sonarqube:sonar-web (>=6.2 <=7.0-RC1)

org.sonarsource.sonarqube:sonar-web MAVEN version =6.2, =6.2, =7.0-RC1 Source cves: CVE-2024-38460 Source advisory: OSV:GHSA-HW2C-8XGW-MF57...

Mattermost Desktop App Security Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.7.0 and earlier, which stems from an inability to disable certain Electron debugging flags, which allows bypassing TCC restrictions...

Mattermost Desktop App Security Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.7.0 and earlier, which stems from a failure to properly prompt for permissions when opening an external URL, allowing remote attackers to run arbitrar...

SUSE CVE-2024-23793

The file upload feature in OTRS and OTRS Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl...

Ninja Web Framework Security Vulnerability

Ninja Web Framework is a full-stack web framework for Java open-sourced by Ninja Web Framework. A security vulnerability exists in Ninja Web Framework version v7.0.0, which stems from the use of a weak encryption algorithm, resulting in the possible disclosure of sensitive information...

PT-2024-26964 · Pointsharp · Pointsharp Cryptshare Server

Name of the Vulnerable Software and Affected Versions: Pointsharp Cryptshare Server versions prior to 7.0.0 Description: The issue is related to an XSS problem in notification messages. Recommendations: For versions prior to 7.0.0, update to version 7.0.0 or later to resolve the issue...

dotnet: stack buffer overrun in Double Parse

A remote code execution vulnerability exists in .NET 7.0 and .NET 8.0. A stack buffer overrun occurs in the .NET Double Parse routine...

CVE-2024-35085

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml...

Accellion Kiteworks 安全漏洞

Accellion Kiteworks is a private cloud file sharing solution. A security vulnerability exists in Accellion Kiteworks version 7.0.0 and earlier, which stems from the presence of reflective cross-site scripting...

PT-2024-30595 · WordPress · Tutor Lms Pro

Name of the Vulnerable Software and Affected Versions: Tutor LMS Pro plugin for WordPress versions up to, and including, 2.7.0 Description: The issue allows for unauthorized access, modification, and loss of data due to a missing capability check on the authenticate function. This enables...

CVE-2023-40720

An authorization bypass through user-controlled key vulnerability CWE-639 in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests...

PT-2024-3553

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 7.0.0 Description The issue is related to a double free vulnerability, which may allow a privileged attacker to execute unauthorized code or commands. This can be achieved via crafted HTTP or HTTPS requests...

DEBIAN-CVE-2024-32663

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19...

Suricata 安全漏洞

Suricata is a suite of network Intrusion Detection Systems IDS, Intrusion Prevention Systems IPS, and network security monitoring engines developed by the Open Information Security Foundation OISF and its supporting vendors, which supports multi-threading, built-in IPv6, and the ability to load...

WordPress Quick Featured Images plugin <= 13.7.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Thumbnail Deletion/Setting vulnerability discovered by Lucio Sá in WordPress Plugin Quick Featured Images versions = 13.7.0...

CVE-2024-21084

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Service Gateway. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Whil...

WordPress Yoga Schedule Momoyoga plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Yoga Schedule Momoyoga versions = 2.7.0...

WordPress WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin <= 7.0 - Sensitive Information Exposure via insufficiently protected files vulnerability

Sensitive Information Exposure via insufficiently protected files vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content versions = 7.0...