PT-2024-19606 · Crushftp · Crushftp

Name of the Vulnerable Software and Affected Versions: CrushFTP versions 10.5.5 through 10.6.0 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via a crafted payload. Recommendations: For CrushFTP versions 10.5.5 through 10.6.0, update to a version that...

PT-2024-25887 · Unknown · One Click Demo Import

Name of the Vulnerable Software and Affected Versions: One Click Demo Import versions 3.2.0 and earlier Description: The issue is related to the Deserialization of Untrusted Data, which affects the functionality of the software. Recommendations: For versions 3.2.0 and earlier, update to a version...

PT-2024-14852

Name of the Vulnerable Software and Affected Versions Save as PDF Plugin by Pdfcrowd WordPress plugin versions prior to 3.2.0 Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability ...

PT-2024-4531 · Cyberpower · Cyberpower Powerpanel Enterprise

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel Enterprise versions prior to 2.8.3 Description: A sql injection vulnerability exists in the software, allowing an unauthenticated remote attacker to leak sensitive information via the query utask verbose function within...

PT-2024-3338 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.201 Description: The issue is a use-after-free vulnerability in the Visuals component of Google Chrome, allowing a remote attacker who has compromised the renderer process to potentially perform a...

PT-2024-16523 · WordPress +1 · Ssl Zen Wordpress Plugin +1

Name of the Vulnerable Software and Affected Versions: SSL Zen WordPress plugin versions prior to 4.6.0 Description: The issue arises because the SSL Zen WordPress plugin relies solely on .htaccess to prevent access to the site's generated private keys. This poses a problem for servers that do no...

PT-2024-25913

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.11.8 libxml2 versions 2.12.x prior to 2.12.7 Description An issue was discovered in xmllint, which is part of libxml2. The problem arises when formatting error messages with xmllint --htmlout, resulting in a buffer...

PT-2024-7445 · Samsung · Samsung Android

Name of the Vulnerable Software and Affected Versions: Samsung Android mobile devices affected versions not specified Samsung Android mobile devices versions prior to SMR May-2024 Release 1 Description: The issue is related to weaknesses in the authentication procedure of the bootloader component...

PT-2024-18779 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 25.0.0.41 Description: The issue is related to improper privilege management, allowing local attackers to bypass protection for cookies. This enables them to access sensitive information without proper...

PT-2024-25831 · Unknown · Post Grid Master

Name of the Vulnerable Software and Affected Versions: Post Grid Master versions 3.4.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in AddonMaster Post Grid Master. Recommendations: For Post Grid Master versions 3.4.7 and earlier, update to a version late...

PT-2024-25541 · Michael Nelson · Print My Blog

Name of the Vulnerable Software and Affected Versions: Print My Blog versions 3.26.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in Michael Nelson Print My Blog. Recommendations: For versions 3.26.2 and earlier, update to a version later than 3.26.2 to...

PT-2024-25926 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.1 Description: The issue is related to a reachable assertion that can cause an AMF crash via NAS messages from a UE. This occurs in the gmm state authentication function in amf/gmm-sm.c when the condition != OGS...

PT-2024-25570 · Nico Martin · Progressive Wordpress

Name of the Vulnerable Software and Affected Versions: Progressive WordPress PWA versions 2.1.13 and earlier Description: The issue is related to a Missing Authorization vulnerability in Nico Martin Progressive WordPress PWA. Recommendations: For versions 2.1.13 and earlier, update to a version...

PT-2024-25554 · Reviewx · Reviewx

Name of the Vulnerable Software and Affected Versions: ReviewX versions 1.6.21 and earlier Description: The issue is related to a Broken Access Control vulnerability. Recommendations: For ReviewX versions 1.6.21 and earlier, update to a version later than 1.6.21 to resolve the issue...

Medium: httpd

Issue Overview: Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58. CVE-2023-38709 HTTP Response splitting in multiple modules in Apache HTTP Server allows an...

PT-2024-18352 · WordPress · Wpbakery

Name of the Vulnerable Software and Affected Versions: wpbakery plugin for WordPress versions up to, and including, 7.5 Description: The issue is related to Stored Cross-Site Scripting via the Post Title tag attribute due to insufficient input sanitization and output escaping. This allows...

PT-2024-26827 · WordPress · Wp Cookie Consent

Name of the Vulnerable Software and Affected Versions: WP Cookie Consent plugin for WordPress versions up to, and including, 3.0.2 Description: The issue is related to a missing capability check on the gdpr policy process delete function, which allows unauthorized loss of data. This makes it...

PT-2024-18215 · WordPress · Print Labels With Barcodes

Name of the Vulnerable Software and Affected Versions: The Print Labels with Barcodes plugin for WordPress versions up to, and including, 3.4.6 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the template and javascrip...

PT-2024-26178 · WordPress · Popup Box

Name of the Vulnerable Software and Affected Versions: The Popup Box WordPress plugin versions prior to 2.2.7 Description: The issue is related to the lack of CSRF checks in some bulk actions, which could allow attackers to make logged-in admins perform unwanted actions, such as deleting popups v...

PT-2024-26167 · WordPress · Side Menu Lite

Name of the Vulnerable Software and Affected Versions: The Side Menu Lite WordPress plugin versions prior to 4.2.1 Description: The issue is related to the lack of CSRF checks in some bulk actions, which could allow attackers to make logged-in admins perform unwanted actions, such as deleting...