PT-2024-12693 · Ibm +3 · Ibm Sdk +4

Name of the Vulnerable Software and Affected Versions: IBM SDK, Java Technology Edition versions 7.1.0.0 through 7.1.5.21 IBM SDK, Java Technology Edition versions 8.0.0.0 through 8.0.8.21 Description: The issue is related to a denial of service attack due to improper enforcement of the JEP 290...

PT-2024-24759 · WordPress · Heateor Social Login

Name of the Vulnerable Software and Affected Versions: Heateor Social Login WordPress versions prior to 1.1.32 Description: The issue allows for a cross-site scripting vulnerability. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using th...

PT-2024-25984 · Zotpress · Zotpress

Name of the Vulnerable Software and Affected Versions: Zotpress versions through 7.3.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This can potentially affect a large number of devic...

PT-2024-25990 · Unknown · Wpsoul Table Maker

Name of the Vulnerable Software and Affected Versions: Wpsoul Table Maker versions 1.9.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2024-29467 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.83 Description: A buffer error may allow attackers malicious read access to memory. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.83, consider updating to a version that fixes t...

PT-2024-27666 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to cause a service crash through an integer overflow. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue...

PT-2024-22809 · Ubiquiti · Unifi Connect Ev Station Pro +3

Name of the Vulnerable Software and Affected Versions: UniFi Connect EV Station versions 1.1.18 and earlier UniFi Connect EV Station Pro versions 1.1.18 and earlier UniFi Connect Display versions 1.9.324 and earlier UniFi Connect Display Cast versions 1.6.225 and earlier Description: An Unverifie...

PT-2024-25545 · Unknown · Academy Lms

Name of the Vulnerable Software and Affected Versions: Academy LMS versions 1.9.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in Academy LMS. Recommendations: For versions 1.9.16 and earlier, update to a version that includes a fix for this issue, as no...

PT-2024-22541 · Yzmcms · Yzmcms

Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.0 Description: The issue allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. This is a Cross Site Scripting XSS issue. Recommendations: For YzmCMS version 7.0, update to a...

Important: glibc

Issue Overview: The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. CVE-2024-2961...

PT-2024-26238 · WordPress · Exclusive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Exclusive Addons for Elementor plugin for WordPress versions up to, and including, 2.6.9.4 Description: The issue is related to Reflected Cross-Site Scripting via the Countdown Expired Title due to insufficient input sanitization and output...

PT-2024-18663 · WordPress · Eleforms

Name of the Vulnerable Software and Affected Versions: EleForms – All In One Form Integration including DB for Elementor plugin for WordPress versions up to, and including, 2.9.9.7 Description: The issue allows unauthorized access to data due to a missing capability check when downloading form...

PT-2024-28534 · Woocommerce · Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce plugin versions up to, and including, 7.1.8 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability of this issue depend on what other plugins are...

PT-2024-25544 · Weblizar · Weblizar School Management Pro

Name of the Vulnerable Software and Affected Versions: Weblizar School Management Pro versions through 10.3.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation...

PT-2024-13243 · Proquality · Pqprintshippinglabels

Name of the Vulnerable Software and Affected Versions: ProQuality pqprintshippinglabels versions prior to 4.15.0 Description: The issue is related to Directory Traversal via the pqprintshippinglabels module. Recommendations: For versions prior to 4.15.0, update to version 4.15.0 or later to resol...

PT-2024-25388 · Unknown · Creative Motion Auto Featured Image

Name of the Vulnerable Software and Affected Versions: Creative Motion Auto Featured Image Auto Post Thumbnail versions n/a through 4.0.0 Description: The issue is a Server-Side Request Forgery SSRF vulnerability in Creative Motion Auto Featured Image Auto Post Thumbnail. This allows an attacker ...

PT-2024-25364 · Unknown · Master Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Master Addons for Elementor versions 2.0.5.4.1 and earlier Description: A Missing Authorization vulnerability has been identified in Jewel Theme Master Addons for Elementor. This issue allows unauthorized access, potentially leading to data...

PT-2024-25322 · 8Theme · 8Theme Xstore Core

Name of the Vulnerable Software and Affected Versions: 8theme XStore Core versions through 5.3.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions throu...

PT-2024-27209 · WordPress · Gutenverse

Name of the Vulnerable Software and Affected Versions: Gutenverse WordPress plugin versions prior to 1.9.1 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation of the htmlTag option in various blocks...

PT-2024-25446 · Jegstudio · Jegstudio Financio

Name of the Vulnerable Software and Affected Versions: Jegstudio Financio versions 1.1.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Jegstudio Financio. This issue allows an attacker to perform unintended actions on a user's account. The estimated number of potentiall...