PT-2024-23473 · Whizzy · Whizzy

Name of the Vulnerable Software and Affected Versions: Whizzy versions 1.1.18 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. Recommendations: For versions 1.1.18 and earlier, update to a version that contains a fix for this issu...

PT-2024-23482 · Unknown · Wppdf.Org Responsive Flipbook

Name of the Vulnerable Software and Affected Versions: wppdf.Org Responsive flipbook versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for the...

PT-2024-23385 · Realmag777 · Wpcs

Name of the Vulnerable Software and Affected Versions: WPCS versions 1.2.0.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the realmag777 WPCS. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions 1.2.0.1 and...

PT-2024-23121 · Unknown · Electron Packager

Name of the Vulnerable Software and Affected Versions: Electron Packager versions prior to 18.3.1 Description: A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory could contain sensitive information such a...

PT-2024-23387 · Unknown · Woocs – Woocommerce Currency Switcher

Name of the Vulnerable Software and Affected Versions: WOOCS – WooCommerce Currency Switcher versions 1.4.1.7 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web...

PT-2024-2508 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x Description: The issue is related to the cleartext transmission of sensitive information. A local low privileged attacker could potentially exploit this, leading to escalation of...

PT-2024-22826 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-9289 Synology Surveillance Station versions prior to 9.2.0-11289 Description: The issue is related to an SQL Injection vulnerability in the SnapShot.CountByCategory webapi component. This...

PT-2024-23150

Name of the Vulnerable Software and Affected Versions HasTheme WishSuite versions 1.3.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject malicious scrip...

PT-2024-23061 · WordPress · Wp Change Email Sender

Name of the Vulnerable Software and Affected Versions: WP Change Email Sender versions prior to 1.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2024-19358 · Ibm · Ibm Integration Bus For Z/Os +1

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 11.0.0.1 through 11.0.0.23 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.9.0 IBM Integration Bus for z/OS versions 10.1 through 10.1.0.2 Description: The issue concerns the storage of potentiall...

PT-2024-19243 · Snp Digital · Salesking

Name of the Vulnerable Software and Affected Versions: SalesKing versions 1.6.15 and earlier Description: The issue is related to a Missing Authorization vulnerability in SNP Digital SalesKing. Recommendations: For versions 1.6.15 and earlier, update to a version later than 1.6.15 to resolve the...

PT-2025-16950 · Dell · Dell Ecs

Name of the Vulnerable Software and Affected Versions: Dell ECS versions 3.8.1.4 and prior Description: The issue is related to an Improper Input Validation, which could be exploited by a low-privileged attacker with remote access, potentially leading to code execution. Recommendations: For Dell...

PT-2025-2441 · FFmpeg +2 · Ffmpeg +2

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1.1 Description: The issue is a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function. This vulnerability occurs in the audio processing component o...

PT-2024-23252 · Emacs +9 · Emacs +9

Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 29.3 Description: The issue concerns how Gnus in Emacs handles inline MIME contents, treating them as trusted. This could potentially lead to security issues, although specific details about exploitation or affected...

PT-2024-12043 · Codepeople · Codepeople Google Maps Cp

Name of the Vulnerable Software and Affected Versions: CodePeople Google Maps CP versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability in CodePeople Google Maps CP. This vulnerability affects the software by not properly checking authorization,...

PT-2024-20332 · Itop · Itop Dualsafe Password Manager & Digital Vault

Name of the Vulnerable Software and Affected Versions: iTop DualSafe Password Manager & Digital Vault versions prior to 1.4.24 Description: An issue in the software allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by th...

Important: apache-commons-compress

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

PT-2024-22548

Name of the Vulnerable Software and Affected Versions Unit4 Financials by Coda versions prior to 2023Q4 Description The issue is related to an incorrect access control authorization bypass, allowing an authenticated user to modify the password of any user of the application via a crafted request...

PT-2024-18471 · WordPress · Simple Ajax Chat

Name of the Vulnerable Software and Affected Versions: The Simple Ajax Chat WordPress plugin versions prior to 20240223 Description: The issue concerns the reflection of unsanitized input to other users, specifically when visitors use malicious names in the chat. This allows for potential malicio...

PT-2024-22714

Name of the Vulnerable Software and Affected Versions HT Easy GA4 Google Analytics 4 versions 1.1.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...