PT-2024-22616 · Unknown · Swift Prometheus

Name of the Vulnerable Software and Affected Versions: Swift Prometheus versions prior to 2.0.0-alpha.2 Description: The issue arises when un-sanitized string values are applied into metric names or labels, allowing an attacker to send a ?lang query parameter with newlines, or similar characters...

PT-2024-23282 · Unknown · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery versions prior to 21.3.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential unauthorized access and...

PT-2024-23148 · WordPress · Wpwax Post Grid

Name of the Vulnerable Software and Affected Versions: wpWax Post Grid, Slider & Carousel Ultimate versions 1.6.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

PT-2024-23139 · WordPress · Compact Wp Audio Player

Name of the Vulnerable Software and Affected Versions: Compact WP Audio Player versions 1.9.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2024-19357 · Ibm · Ibm Websphere Application Server Liberty

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 24.0.0.4 Description: The issue is a denial of service caused by sending a specially crafted request, allowing a remote attacker to consume memory resources on the server...

PT-2024-12205 · Mediawiki · Mediawiki Cargo Extension

Name of the Vulnerable Software and Affected Versions: MediaWiki Cargo extension versions through 1.39.3 Description: An issue was discovered in the Cargo extension for MediaWiki, where there is mishandling of backticks to smartSplit. Recommendations: For MediaWiki Cargo extension versions throug...

PT-2024-23238 · Anope +3 · Anope +3

Name of the Vulnerable Software and Affected Versions: Anope versions prior to 2.0.15 Description: The issue allows resetting the password of a suspended account. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2024-21199 · Joomunited · Joomunited Wp Media Folder

Name of the Vulnerable Software and Affected Versions: JoomUnited WP Media folder versions 5.7.2 and earlier Description: A Missing Authorization issue affects the JoomUnited WP Media folder, allowing unauthorized access. Recommendations: For versions 5.7.2 and earlier, update to a version later...

PT-2024-21198 · Joomunited · Joomunited Wp Media Folder

Name of the Vulnerable Software and Affected Versions: JoomUnited WP Media folder versions 5.7.2 and earlier Description: A Missing Authorization issue affects the JoomUnited WP Media folder, allowing unauthorized access. Recommendations: For versions 5.7.2 and earlier, update to a version later...

PT-2024-18327 · Opentext · Opentext Arcsight Platform

Name of the Vulnerable Software and Affected Versions: OpenText ArcSight Platform versions up to 24.1.0 Description: A potential issue has been identified in the OpenText ArcSight Platform that could be remotely exploited, potentially allowing remote code execution. Recommendations: For OpenText...

PT-2024-15931 · WordPress · The Advanced Social Feeds Widget & Shortcode

Name of the Vulnerable Software and Affected Versions: The Advanced Social Feeds Widget & Shortcode WordPress plugin versions 1.7 and earlier Description: The issue concerns the lack of sanitization and escaping of some settings in the plugin, which could allow high-privilege users, such as admin...

PT-2024-22554 · Unknown · Abema App For Android

Name of the Vulnerable Software and Affected Versions: ABEMA App for Android versions prior to 10.65.0 Description: The issue exists due to the improper export of Android application components, allowing another app installed on the user's device to access an arbitrary URL on the ABEMA App for...

PT-2024-13993 · WordPress · Wpwax Legal Pages

Name of the Vulnerable Software and Affected Versions: wpWax Legal Pages versions 1.3.7 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF and Incorrect Authorization in wpWax Legal Pages. This allows for unauthorized actions to be performed. Recommendations: For...

PT-2024-20749 · Unknown · Maspik – Spam Blacklist

Name of the Vulnerable Software and Affected Versions: Maspik – Spam Blacklist versions 0.10.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2024-18098 · WordPress · The Academy Lms

Name of the Vulnerable Software and Affected Versions: The Academy LMS – eLearning and online course solution for WordPress plugin versions up to, and including, 1.9.19 Description: The issue is related to privilege escalation due to the plugin allowing arbitrary user meta updates through the sav...

PT-2024-15569 · WordPress · Artibot Free Chat Bot For Wordpress Websites

Name of the Vulnerable Software and Affected Versions: ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress versions up to, and including, 1.1.6 Description: The issue allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pag...

PT-2024-21789 · Unknown · A-Blog Cms

Name of the Vulnerable Software and Affected Versions: a-blog cms versions 3.1.x through 3.1.9 and earlier a-blog cms versions 3.0.x through 3.0.30 and earlier a-blog cms versions 2.11.x through 2.11.59 and earlier a-blog cms versions 2.10.x through 2.10.51 and earlier a-blog cms version 2.9 and...

PT-2024-9560 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.3.1-9346-9 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability, in the OTP reset functionality. This...

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed and vulnerability in SQL Server. The vulnerability is located in the Django backend and allows a malicious party to be able to use the client application of the victim to execute an SQL injection and thus execute arbitrary code execute arbitrary code with the victim's privileg...

PT-2024-2211 · Adobe · Lightroom Desktop

Name of the Vulnerable Software and Affected Versions: Lightroom Desktop versions 7.1.2 and earlier Description: The issue is related to an Untrusted Search Path vulnerability. This could result in arbitrary code execution in the context of the current user. If the application uses a search path ...