PT-2024-12786 · Dell · Dell Update Package

Name of the Vulnerable Software and Affected Versions: Dell Update Package DUP versions prior to 4.9.10 Description: The issue allows a malicious user with local access to the system to potentially exploit it and run arbitrary code as admin. This is due to an Uncontrolled Search Path vulnerabilit...

PT-2024-22157 · Sirv · Sirv Image Optimizer

Name of the Vulnerable Software and Affected Versions: Sirv Image Optimizer, Resizer and CDN versions through 7.2.0 Description: A Missing Authorization issue affects the Image Optimizer, Resizer and CDN – Sirv. Recommendations: For versions through 7.2.0, update to a version that contains a fix...

PT-2024-21224 · Woocommerce · Nuggethon Custom Order Statuses For Woocommerce

Name of the Vulnerable Software and Affected Versions: Nuggethon Custom Order Statuses for WooCommerce versions 1.5.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2024-14003 · WordPress · Melapress Wp Activity Log

Name of the Vulnerable Software and Affected Versions: Melapress WP Activity Log versions through 4.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

Advisory ROSA-SA-2024-2359

software: postgresql 12.16 WASP: ROSA-CHROME packageevrstring: postgresql-12.16-1.src.rpm CVE-ID: CVE-2023-2454 BDU-ID: 2023-03247 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Schema Handler component of the PostgreSQL database management system is related to access delimitation flaws...

PT-2024-20907 · Thesycon · Tusbaudio

Name of the Vulnerable Software and Affected Versions: Thesycon Software Solutions Gmbh & Co. KG TUSBAudio versions prior to 5.68.0 Description: An issue in TUSBAudio MSI-based installers allows a local attacker to execute arbitrary code via the msiexec.exe repair mode. This enables a local...

PT-2024-3141

Name of the Vulnerable Software and Affected Versions Tutor LMS versions up to, and including, 2.6.1 Description The issue is related to a SQL Injection vulnerability due to insufficient protection of the SQL query structure when handling the question id parameter. This allows a remote attacker t...

PT-2024-19442 · Gecko Sdk · Gecko Sdk

Name of the Vulnerable Software and Affected Versions: Gecko SDK versions through 4.4.0 Description: The issue arises from the use of a True Random Number Generator TRNG before its initialization by the ECDSA signing driver when exiting low-power modes EM2/EM3 on Virtual Secure Vault VSE devices...

PT-2024-17421 · WordPress · Wp Recipe Maker

Name of the Vulnerable Software and Affected Versions: WP Recipe Maker plugin for WordPress versions up to, and including, 9.1.2 Description: The issue allows authenticated attackers with subscriber-level access and above to perform SQL Injection via the recipes parameter due to insufficient...

PT-2024-17568 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor plugin for WordPress versions up to, and including, 5.9.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the label icon paramet...

PT-2024-21319 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.0 through 7.4.3.13 Liferay DXP 7.4 before update 10 Liferay DXP 7.3 before update 4 Liferay DXP 7.2 before fix pack 17 Liferay DXP older unsupported versions Liferay Portal older unsupported versions Description:...

Medium: lua

Issue Overview: In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read. CVE-2021-45985 An issue in the component luaGrunerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs. CVE-2022-33099 Affected Packages: lua...

FreeBSD : gitea -- Prevent anonymous container access (bd7592a1-cbfd-11ee-a42a-5404a6f3ca32)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bd7592a1-cbfd-11ee-a42a-5404a6f3ca32 advisory. - Even with RequireSignInView enabled, anonymous users can use docker pull to fetch public images...

PT-2024-1901 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.1 through 16.7.5 GitLab CE/EE versions 16.8 through 16.8.2 GitLab CE/EE versions 16.9 through 16.9.0 Description: An issue has been discovered affecting GitLab CE/EE, where under some specialized conditions, an LDAP...

PT-2024-13185 · Dell +1 · Dell Supportassist For Home Pcs +2

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.0 through 3.14.1 Dell SupportAssist for Business PCs versions 3.0 through 3.4.1 Description: A security concern has been identified in Dell SupportAssist, impacting locally authenticated users on the...

CVE-2024-25121 Improper Access Control Persisting File Abstraction Layer Entities via Data Handler in TYPO3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO3 entities of the File Abstraction Layer FAL could be persisted directly via DataHandler. This allowed attackers to reference files in the fallback storage directly and retrieve...

PT-2024-2124 · Adobe · Acrobat Reader +4

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30539 through 23.008.20470 and earlier Adobe Acrobat 2020 and earlier Adobe Acrobat Reader Document Cloud versions prior to the fixed version Adobe Acrobat Document Cloud versions prior to the fixed version...

PT-2024-1753 · Adobe · Acrobat 2020 +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 20.005.30539 Adobe Acrobat Reader versions 20.005.30539 and earlier Adobe Acrobat 2020 versions prior to 20.005.30539 Adobe Acrobat Reader 2020 versions prior to 20.005.30539 Adobe Acrobat Reader versions...

PT-2024-3431 · Adobe · Acrobat 2020 +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Adobe Acrobat 2020 and Adobe Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability when handling AcroForms in PDF files. This could allow a...

PT-2024-1878 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application, making it susceptible to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on...