PT-2024-12677 · Ibm · Ibm Storage Scale

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.1.0.0 through 5.1.9.2 Description: The issue allows an authenticated user to steal or manipulate an active session to gain access to the system. Recommendations: For versions 5.1.0.0 through 5.1.9.2, update to a...

PT-2024-19886 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 4.2.1 Description: The anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. Recommendations: For versions prio...

PT-2025-25903 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ftrace functionality. This issue arises when ftrace startup enable fails, causing the...

PT-2025-18904 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the race condition between unloading and reloading kernel modules. Description: A race condition in the Linux kernel has been resolved. The issue was caused by a bug...

PT-2024-18402 · WordPress · The Event Monster

Name of the Vulnerable Software and Affected Versions: The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress versions up to, and including, 1.3.4 Description: The issue concerns a PHP Object Injection vulnerability via deserialization of untrusted input from a...

PT-2025-18898 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.156 Description: A memory allocation issue in the Linux kernel's bnxt en driver has been resolved. The driver needs to track concurrent TPA completions on the aggregation ring, and on P5 chips, the maximum...

PT-2024-24158

Name of the Vulnerable Software and Affected Versions FlowiseAI Inc Flowise versions 1.6.2 and before FlowiseAI Inc Flowise versions prior to 1.8.1 Description An issue in FlowiseAI Inc Flowise allows a remote attacker to execute arbitrary code via a crafted script sent to the /api/v1 component...

PT-2024-24195 · Yealink · Yealink Vp59 Microsoft Teams Phone

Name of the Vulnerable Software and Affected Versions: Yealink VP59 Microsoft Teams Phone versions 91.15.0.118 through 122.15.0.141 Description: An issue allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option. Recommendations: For Yealink VP59 Microsoft...

PT-2024-3293

Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.00 Description: The issue is related to errors in processing input data in the ANSI Escape Sequence Handler component of the WinRAR file archiver. Exploitation of this issue may allow a remote attacker to cause a...

PT-2024-23513 · WordPress · Enl Newsletter

Name of the Vulnerable Software and Affected Versions: ENL Newsletter WordPress plugin versions 1.0.0 through 1.0.1 Description: The issue allows admin+ users to perform SQL injection attacks due to the lack of sanitization and escaping of a parameter before its use in a SQL statement...

PT-2024-25430

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 10.4 Description An issue was discovered in Veritas NetBackup that allows the Multi-Threaded Agent to be used for arbitrary file deletion on protected files. Recommendations For versions prior to 10.4, updat...

CVE-2024-25624 iris-web vulnerable to Server Side Template Injection in reports

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Due to an improper setup of Jinja2 environment, reports generation in iris-web is prone to a Server Side Template Injection SSTI. Successful exploitation of the vulnerability c...

PT-2024-22695 · WordPress · Agca Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: AGCA WordPress plugin versions prior to 7.2.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escaped, a...

PT-2024-4545 · 8Theme · 8Theme Xstore

Name of the Vulnerable Software and Affected Versions: 8theme XStore versions n/a through 9.3.5 Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows SQL injection. This can enable a remote attacker to execute arbitrary SQL queries t...

PT-2024-24809 · Elementor · Jeg Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit versions through 2.6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions...

PT-2024-3185 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 3.5.1 Description: The issue is related to an unbounded resource allocation in the FreeRDP client, which can be exploited by a remote attacker to cause a denial of service. A malicious server can crash the FreeRDP...

PT-2024-20547 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: wpDiscuz plugin for WordPress versions up to, and including, 7.6.15 Description: The issue is related to Stored Cross-Site Scripting via the Alternative Text field of an uploaded image due to insufficient input sanitization and output escapin...

PT-2024-24625 · Unknown · Dethemekit For Elementor

Name of the Vulnerable Software and Affected Versions: DethemeKit For Elementor versions through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means an attacker can inject...

PT-2024-6375

Name of the Vulnerable Software and Affected Versions PyTorch versions prior to 2.2.0 Description The issue is related to a heap buffer overflow in the /runtime/vararg functions.cpp component. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability is...

PT-2024-4897 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Finance LOV versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade...