Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself. The recommendation is to update an impacted devi...

PT-2024-39003 · WordPress +1 · Pagelayer

Name of the Vulnerable Software and Affected Versions: Page Builder: Pagelayer versions prior to 1.8.8 Description: The issue concerns the Page Builder: Pagelayer WordPress plugin, where versions prior to 1.8.8 do not properly sanitise and escape some of its settings. This could allow high...

PT-2024-30477 · Woocommerce · Ukrsolution Print Barcode Labels For Your Woocommerce

Name of the Vulnerable Software and Affected Versions: UkrSolution Print Barcode Labels for your WooCommerce versions 3.4.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This...

PT-2024-27592 · Post Grid · Post Grid

Name of the Vulnerable Software and Affected Versions: Post Grid versions through 7.7.4 Description: The issue is related to a Missing Authorization vulnerability in Post Grid, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

PT-2024-28225 · Mediaron Llc · Custom Query Blocks

Name of the Vulnerable Software and Affected Versions: MediaRon LLC Custom Query Blocks versions 5.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 5.2.0...

PT-2024-27301 · Unknown · Wishlist Member

Name of the Vulnerable Software and Affected Versions: WishList Member X versions 3.26.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions 3.26.6...

PT-2024-27389 · Optinly · Optinly

Name of the Vulnerable Software and Affected Versions: Optinly versions 1.0.18 and earlier Description: The issue is related to a Missing Authorization vulnerability in OptinlyHQ Optinly, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...

Important: qt5-qtgraphicaleffects

Issue Overview: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted signal has not ye...

PT-2024-27377 · Unknown · User Rights Access Manager

Name of the Vulnerable Software and Affected Versions: User Rights Access Manager versions 1.1.2 and earlier Description: The issue is related to an Access Control vulnerability in the User Rights Access Manager. This vulnerability allows unauthorized access. Recommendations: For versions 1.1.2 a...

PT-2024-27412 · Unknown · Advanced Custom Fields Pro

Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields PRO versions through 6.3.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-23519 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce versions prior to 4.3.11 Description: The issue is related to an authentication bypass vulnerability in HPE StoreOnce, which could allow a remote attacker to bypass security restrictions. This vulnerability may be chained with...

PT-2024-9416 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: Ollama versions prior to 0.1.34 Description: The issue is related to an uncontrolled consumption of resources in Ollama. It is caused by the CreateModelHandler function using os.Open to read a file until completion, where the req.Path paramet...

PT-2024-16367 · Sourcecodester · Sourcecodester Airport Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Airport Booking Management System version 1.0 Description: A critical issue was found in the function details of the component Passport Number Handler, leading to buffer overflow. The attack needs to be approached locally. The...

PT-2024-34329 · Litespeed · Litespeed Cache

Name of the Vulnerable Software and Affected Versions: LiteSpeed Cache versions through 6.5.1 Description: The issue is related to an Incorrect Privilege Assignment vulnerability in LiteSpeed Cache, allowing Privilege Escalation. This vulnerability enables an attacker to gain administrative...

PT-2024-34147 · Scoold · Scoold

Name of the Vulnerable Software and Affected Versions: Scoold versions prior to 1.64.0 Description: A semicolon path injection vulnerability was found on the "/api;/config" endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorized access to sensitive...

PT-2024-34230 · Seopress · Seopress

Name of the Vulnerable Software and Affected Versions: SEOPress versions through 8.1.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 8.1.1, update to ...

PT-2024-31089 · Visionos · Visionos

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 Description: A user may be able to view sensitive user information due to inadequate redaction of sensitive information. This issue was addressed with improved redaction of sensitive information. Recommendations...

PT-2024-34668 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 27.1 Description: The issue allows users with specific permissions to insert a stored XSS payload in the description, potentially leading to security breaches. Recommendations: For versions prior to 27.1, update to...

PT-2024-34364

Name of the Vulnerable Software and Affected Versions: KDE Kmail versions prior to 6.2.0 Description: The issue allows man-in-the-middle attackers to trigger the use of an attacker-controlled mail server. This is because cleartext HTTP is used for retrieving configuration from URLs such as...

PT-2024-34358

Name of the Vulnerable Software and Affected Versions: libsndfile versions prior to 1.2.3 Description: The issue is related to an out-of-bounds read in the ogg vorbis.c component of the libsndfile library, specifically in the vorbis analysis wrote function. This could potentially allow an attacke...