PT-2024-24233 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: Flatpress version 1.3 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Flatpres...

PT-2024-39461 · Tenable · Nessus Network Monitor

Name of the Vulnerable Software and Affected Versions: Nessus Network Monitor versions 6.4.1 and earlier Description: A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the...

PT-2024-39356 · WordPress · Osm – Openstreetmap

Name of the Vulnerable Software and Affected Versions: OSM – OpenStreetMap plugin for WordPress versions up to, and including, 6.1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's osm map and osm map v3 shortcodes due to insufficient input sanitization and outpu...

PT-2024-32551 · WordPress · Stuart Wilson Joy Of Text Lite

Name of the Vulnerable Software and Affected Versions: Stuart Wilson Joy Of Text Lite versions 2.3.1 and earlier Description: A Missing Authorization issue is present in Stuart Wilson Joy Of Text Lite, allowing for unauthorized access. This issue impacts the plugin up to version 2.3.1 on WordPres...

PT-2024-32419 · Gotenna · Gotenna Pro App

Name of the Vulnerable Software and Affected Versions: goTenna Pro App versions prior to the current app version Description: The issue concerns the lack of encryption for callsigns in messages. This could potentially reveal sensitive information about users and may be leveraged for other...

PT-2024-32516 · Unknown · Use Any Font

Name of the Vulnerable Software and Affected Versions: Use Any Font versions n/a through 6.3.08 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 6.3.08, update to a version later than 6.3....

PT-2024-31672 · Zimbra · Zimbra Collaboration

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration ZCS versions prior to 10.1.1 Description: A stored Cross-Site Scripting XSS issue exists in the "/modern/contacts/print" endpoint of Zimbra webmail. This allows an attacker to inject and execute arbitrary JavaScript code ...

PT-2024-31170 · Topdesk · Topdesk

Name of the Vulnerable Software and Affected Versions: todesk version 1.1 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the "/todesk.com/news.html" API endpoint, where a parameter is vulnerable to SQL injection. No information is provided about th...

PT-2024-26057 · Unknown · Setupwizard

Name of the Vulnerable Software and Affected Versions: Setupwizard versions prior to SMR Aug-2024 Release 1 Description: The issue arises from improper handling of exceptional conditions, allowing physical attackers to bypass proper validation. This can be exploited by physical attackers...

PT-2024-38715 · WordPress · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: The WP Job Portal plugin for WordPress versions up to, and including, 2.1.6 Description: The WP Job Portal plugin for WordPress is vulnerable to Local File Inclusion, Arbitrary Settings Update, and User Creation. This vulnerability allows...

PT-2024-37929 · WordPress · Secure Copy Content Protection/Content Locking

Name of the Vulnerable Software and Affected Versions: Secure Copy Content Protection and Content Locking WordPress plugin versions prior to 4.1.7 Description: The issue is related to the Secure Copy Content Protection and Content Locking WordPress plugin, which does not properly sanitise and...

PT-2024-27139 · WordPress · Web Directory Free Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Web Directory Free WordPress plugin versions prior to 1.7.3 Description: The issue is related to a Local File Inclusion problem. It occurs because the plugin does not validate a parameter before using it in an include, which could lead to Loc...

PT-2024-38583 · WordPress · The 140+ Widgets | Xpro Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress versions up to, and including, 1.4.4.3 Description: The issue is related to Stored Cross-Site Scripting via the arrow parameter within the Post Grid widget due to...

PT-2024-37551 · WordPress · Phlox Pro

Name of the Vulnerable Software and Affected Versions: Phlox PRO theme for WordPress versions up to, and including, 5.16.4 Description: The issue is related to Reflected Cross-Site Scripting via search parameters due to insufficient input sanitization and output escaping. This allows...

PT-2024-6164 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Description: The vulnerability is an inappropriate implementation bug in the V8 JavaScript and WebAssembly engine, which could allow a remote attacker to potentially exploit heap corruption via a...

PT-2024-77: Time-based SQL Injection in Netcat CMS (module comments)

The vulnerability was identified in Netcat CMS module comments, version 6.4 Extra. The discovered vulnerability allows an attacker to read information from the database. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 20.08.2024 Recommendations: Update to version or...

PT-2024-30493 · Unknown · Plugin Notes Plus

Name of the Vulnerable Software and Affected Versions: Plugin Notes Plus versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For Plugin Notes Plus versions...

PT-2024-30429 · WordPress · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal versions 2.1.6 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in WP Job Portal. Recommendations: For WP Job Portal versions 2.1.6 and earlier, update to a versi...

PT-2024-9547 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to insufficient protection of the web page structure when handling DOM elements, which could allow a remote attacker to execute arbitrary code. This is a...

PT-2024-18706 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 3.4.11 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...