PT-2024-26652 · Unknown · Sina Extension For Elementor

Name of the Vulnerable Software and Affected Versions: Sina Extension for Elementor versions 3.5.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or Stored XSS. This allows for the storage of...

PT-2024-26690 · Kognetiks · Kognetiks Chatbot For Wordpress

Name of the Vulnerable Software and Affected Versions: Kognetiks Chatbot for WordPress versions 1.9.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, allowing Stored XSS. This can be exploited by...

PT-2024-32635 · WordPress · Buddyboss Platform

Name of the Vulnerable Software and Affected Versions: buddyboss-platform WordPress plugin versions prior to 2.6.0 Description: The issue allows a user to like a private post by manipulating the ID included in the request. This is due to an IDOR vulnerability. Recommendations: For versions prior ...

Redmine DMSF Plugin vulnerable to path traversal

Overview Redmine DMSF Plugin provided by Kontron contains a path traversal vulnerability CWE-22. Tsukuba Secure Network Research Co. Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When the affected...

PT-2024-15073 · WordPress · Unlimited Elements For Elementor

Name of the Vulnerable Software and Affected Versions: The Unlimited Elements For Elementor plugin versions up to, and including, 1.5.89 Description: The issue allows authenticated attackers with contributor access and above to execute code on the server via the template import functionality. Thi...

PT-2024-36031 · Iap-420 · Iap-420

Name of the Vulnerable Software and Affected Versions: IAP-420 versions 2.01e and below Description: The issue is related to missing input validation in the ORing IAP-420 web-interface, which allows stored Cross-Site Scripting XSS. This problem is being actively exploited. Recommendations: For...

PT-2024-31562 · WordPress · Business Card Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Business Card WordPress plugin versions prior to 1.1 Description: The issue is related to the lack of CSRF checks in certain areas, allowing attackers to potentially make logged-in users perform unwanted actions, such as editing cards, throug...

PT-2024-21814 · Zohocorp · Manageengine Pam360

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine PAM360 version 6601 Description: The issue allows a low-privileged user to perform admin actions due to an authorization vulnerability. Recommendations: For Zohocorp ManageEngine PAM360 version 6601, update to a version...

PT-2024-9211 · Sonatype · Sonatype Nexus Repository

Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository 2 versions up to and including 2.15.1 Description: A Remote Code Execution issue has been discovered, related to incorrect code generation management. This allows a remote attacker to execute arbitrary code by...

PT-2024-13642 · Crocoblock · Crocoblock Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions 3.2.4 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in Crocoblock JetEngine. Recommendations: For versions 3.2.4 and earlier, update to a versio...

PT-2024-13580 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon Booking System versions n/a through 8.6 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the Salon Booking System. Recommendations: For versions n/a through 8.6, update to a version th...

PT-2024-12005 · German Mesky · Gmace

Name of the Vulnerable Software and Affected Versions: GMAce versions 1.5.2 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows Path Traversal in German Mesky GMAce...

KLA67586 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in MONGO and ZigBee TLV dissectors can be exploited to cause denial of service. 2. Denial...

KLA67582 RCE vulnerability in LibreOffice

Remote code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary unchecked script. Original advisories CVE-2024-3044: Graphic on-click binding allows unchecked script execution Related products LibreOffice CVE list CVE-2024-3044 hig...

PT-2024-3496 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Adobe Acrobat versions prior to the fixed version Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code executi...

Intel® DLB Driver Advisory

Summary: A potential security vulnerability in some Intel® Dynamic Load Balancer DLB driver software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22015 Description: Improper input validation for...

PT-2024-3545 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-25773 · Ofcms · Ofcms

Name of the Vulnerable Software and Affected Versions: OFCMS version 1.1.2 Description: The issue allows for SQL Injection via the new table function. Recommendations: For OFCMS version 1.1.2, update to a version that fixes this issue, however at the moment, there is no information about a newer...

PT-2024-24542 · WordPress · Post Grid

Name of the Vulnerable Software and Affected Versions: The Post Grid Gutenberg Blocks and WordPress Blog Plugin versions prior to 4.0.2 Description: The issue arises from the plugin's failure to validate and escape some of its block options before outputting them back in a page or post where the...

PT-2024-26220 · Kiboko · Kiboko Labs Arigato Autoresponder/Newsletter

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Arigato Autoresponder and Newsletter versions 2.7.2.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions ...