PT-2024-25008 · Unknown · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro versions 1.1.12 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Booking Ultra Pro. Recommendations: For versions 1.1.12 and earlier, update to a version later...

Fuji Xerox / Fujifilm Printers CSRF Vulnerability (CVE-2024-22475)

Multiple Fuji Xerox / Fujifilm printers are prone to a cross-site request forgery CSRF vulnerability in the Web Based Management. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-1672)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-25888 · WordPress · Wordpress Meta Data/Taxonomies Filter

Name of the Vulnerable Software and Affected Versions: WordPress Meta Data and Taxonomies Filter MDTF versions 1.3.3.2 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, allowing Code Inclusion and Functionality Misuse. Recommendations: For WordPress Meta...

PT-2024-12660 · Phlox · Phlox

Name of the Vulnerable Software and Affected Versions: Shortcodes and extra features for Phlox theme versions n/a through 2.14.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability...

PT-2024-13470 · Wedevs · Wedevs Wp User Frontend

Name of the Vulnerable Software and Affected Versions: weDevs WP User Frontend versions 3.6.5 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in weDevs WP User Frontend. Recommendations: For versions 3.6.5 and earlier, update to a...

PT-2024-24902 · Unknown · Giveaways/Contests By Rafflepress

Name of the Vulnerable Software and Affected Versions: RafflePress Giveaways and Contests versions 1.12.7 and earlier Description: The issue is an Authentication Bypass by Spoofing vulnerability that allows Functionality Bypass. Recommendations: For versions 1.12.7 and earlier, update to a versio...

PT-2024-13054 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards based on IntelR 62X Chipset versions prior to 1.14 Description: The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable...

PT-2024-26996

Name of the Vulnerable Software and Affected Versions Newsletter Popup WordPress plugin versions prior to 1.2 Description The issue concerns a lack of CSRF check when deleting a list, which could allow attackers to perform actions via a CSRF attack, making logged-in admins delete lists without...

NuGet Package 'Microsoft.PowerBI.JavaScript' < 2.23.1 Information Disclosure

The remote host has a version of the NuGet Package 'Microsoft.PowerBI.JavaScript' that is prior to 2.23.1 It is, therefore, affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via user interaction, to disclose potentially sensitive informatio...

Intel Chipset Device Software Advisory - Lenovo Support US

No description provided...

PT-2024-18419 · Robotware · Robotware

Name of the Vulnerable Software and Affected Versions: RobotWare versions 6.00 through 6.15.05, except versions 6.10.10 and 6.13.07 RobotWare versions 7.00 through 7.13 Description: The issue allows an attacker to cause the robot to stop and make the robot controller inaccessible. It could...

PT-2024-31227 · WordPress · Sydney Toolbox

Name of the Vulnerable Software and Affected Versions: Sydney Toolbox plugin for WordPress versions up to, and including, 1.31 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the "aThemes: Portfolio" widget, allowing...

PT-2024-10057 · Intel · Intel Arc & Iris Xe Graphics

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics software versions prior to 31.0.101.5081 Description: The issue is related to improper neutralization in the graphics software, which may allow an unauthenticated user to potentially enable escalation of...

PT-2024-5181 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation ...

PT-2024-3543 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 2020 Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Adobe Acrobat 2020 Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability that could result in arbitrar...

PT-2024-3750 · Unknown · Opupi0 Amqp/Mqtt

Name of the Vulnerable Software and Affected Versions: OPUPI0 AMQP/MQTT versions prior to V5.30 Description: A vulnerability has been identified that allows an attacker with remote shell access or physical access to retrieve credentials due to insufficient protection of stored MQTT client...

PT-2024-19730 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 Description: A correctness issue was addressed with improved checks, allowing an app to potentially read arbitrary files. Recommendations: For versions prior to 14.5, update to macOS Sonoma 14.5 to resolve...

Medium: cni-plugins

Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...

Medium: python-pymongo

Issue Overview: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with...