PT-2024-13372 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to execute arbitrary code in any apps through use after free. Recommendations: For OpenHarmony versions prior to 3.2.4, update to a version newer than 3.2.4 to...

PT-2024-14879 · Mollie · Mollie Payments For Woocommerce

Name of the Vulnerable Software and Affected Versions: Mollie Payments for WooCommerce versions prior to 7.3.12 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Mollie Payments for WooCommerce plugin. Recommendations: For versions prior to...

PT-2024-21318 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.3.15 Liferay DXP 7.4 before update 16 Liferay DXP 7.3 before update 4 Liferay DXP 7.2 before fix pack 19 Description: The Image Uploader module relies on a request parameter to limit the size of files...

PT-2024-15692 · WordPress · The Passster

Name of the Vulnerable Software and Affected Versions: The Passster – Password Protect Pages and Content plugin for WordPress versions up to, and including, 4.2.6.2 Description: The issue allows unauthenticated attackers to obtain sensitive information, including post titles, slugs, IDs, content,...

PT-2024-1781 · Intel · Openbmc

Name of the Vulnerable Software and Affected Versions: Intel Server Product OpenBMC versions prior to egs-1.09 Description: The issue is related to improper authentication in the OpenBMC firmware, which may allow an authenticated user to escalate their privileges via local access. This is due to...

PT-2024-1679 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

Vulnerability fixed in Microsoft Windows Defender

Microsoft has fixed a vulnerability in Defender for Endpoint. A local malicious agent could exploit the vulnerability to execute arbitrary code with SYSTEM privileges and thus potentially gain access to sensitive data on the system. Microsoft has made updates available that fix the described...

PT-2024-2747

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.15.17 Qt versions 6.x prior to 6.2.12 Qt versions 6.3.x through 6.5.x prior to 6.5.5 Qt versions 6.6.x prior to 6.6.2 Description A buffer overflow and application crash can occur via a crafted KTX image file. The issue ...

PT-2024-20622 · Biteship · Plugin Ongkos Kirim Kurir Instant

Name of the Vulnerable Software and Affected Versions: Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo versions through 2.2.24 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XS...

PT-2024-20414 · Apktool · Apktool

Name of the Vulnerable Software and Affected Versions: Aprktool versions prior to 2.9.3 Description: The issue allows ../ and /.. directory traversal. This means an attacker could potentially access files or directories outside the intended directory structure by manipulating the path using ../ o...

PT-2024-19330 · Unknown · Simple Membership

Name of the Vulnerable Software and Affected Versions: Simple Membership versions through 4.4.1 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Simple Membership plugin. Recommendations: For...

PT-2024-13184 · Dell · Dell Pair Installer

Name of the Vulnerable Software and Affected Versions: Dell Pair Installer versions prior to 1.2.1 Description: The issue allows a low privilege user with local access to the system to potentially exploit it and delete arbitrary files, resulting in Denial of Service. Recommendations: For versions...

PT-2024-19063 · Unknown · Electronic Deliverables Creation Support Tool

Name of the Vulnerable Software and Affected Versions: Electronic Deliverables Creation Support Tool Construction Edition versions prior to 1.0.4 Electronic Deliverables Creation Support Tool Design & Survey Edition versions prior to 1.0.4 Description: The issue is related to the improper...

PT-2024-15573 · Microsoft +1 · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: ELAN Match-on-Chip FPR solution versions prior to 3.0.12011.08009 Legacy ELAN Match-on-Chip FPR solution versions prior to 3.3.12011.08103 ESS Description: The ELAN Match-on-Chip FPR solution has a design fault that poses a potential risk of...

Medium: gnutls

Issue Overview: A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5 padding. Only TLS ciphertext processing is affected. CVE-2023-5981 Affected Packages: gnutls Issue Correction:...

PT-2024-2693 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions V2201 through V2302.0006 Description: The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially...

PT-2024-2691 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions V2201 through V2302.0006 Description: The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute...

PT-2024-14518 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a command injection in the wget download function, allowing the execution of arbitrary commands on the operating system. Recommendations: For versions prior to 2.6.0, update to...

PT-2023-31892 · Json-Jwt · Json-Jwt

Name of the Vulnerable Software and Affected Versions: json-jwt aka JSON::JWT versions 1.15.x through 1.15.3.0 json-jwt aka JSON::JWT versions 1.16.x through 1.16.5 Description: The issue allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be us...

PT-2023-29185 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 7.13.0.10 Dell PowerProtect DD LTS versions prior to 7.7.5.25 Dell PowerProtect DD LTS versions prior to 7.10.1.15 Dell PowerProtect DD version 6.2.1.110 Description: A path traversal vulnerability exist...