PT-2024-10439 · Ibm · Ibm Fusion Hci +1

Name of the Vulnerable Software and Affected Versions: IBM Fusion and IBM Fusion HCI versions 2.3.0 through 2.8.2 Description: The issue is related to insufficient restriction of the communication channel for given endpoints, which may allow an attacker to gain unauthorized access to protected...

PT-2024-17338 · WordPress · Animated Counters

Name of the Vulnerable Software and Affected Versions: Animated Counters plugin for WordPress versions up to, and including, 2.0 Description: The Animated Counters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animatedcounte' shortcode due to insufficient inp...

PT-2025-32245

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.66 Description An inappropriate implementation in Picture in Picture functionality allowed a remote attacker to perform UI spoofing. The attacker could convince a user to engage in specific UI gesture...

PT-2024-36132 · Unknown · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System versions through 2.9.9.5.2 Description: The issue is related to a Missing Authorization vulnerability in the Pinpoint Booking System, allowing exploitation of incorrectly configured access control security levels...

PT-2024-36112 · Unknown · Limit Login Attempts

Name of the Vulnerable Software and Affected Versions: Limit Login Attempts versions n/a through 5.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

PT-2024-12478 · WordPress · Zippy

Name of the Vulnerable Software and Affected Versions: Zippy versions 1.6.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, also described as a broken access control vulnerability, which affects the Zippy plugin for WordPress. This vulnerability allows...

PT-2024-17342 · Unknown +1 · Woocommerce +1

Name of the Vulnerable Software and Affected Versions: WP Crowdfunding plugin for WordPress versions up to, and including, 2.1.12 Description: The issue is related to a missing capability check on the install woocommerce plugin function action, allowing authenticated attackers with Subscriber-lev...

PT-2024-36182 · Unknown · Formfacade

Name of the Vulnerable Software and Affected Versions: FormFacade versions 1.3.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in FormFacade. Recommendations: For...

PT-2024-12921 · Premmerce · Premmerce User Roles

Name of the Vulnerable Software and Affected Versions: Premmerce User Roles versions 1.0.12 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Premmerce User...

PT-2024-36163 · Themeum · Wp Mega Menu

Name of the Vulnerable Software and Affected Versions: WP Mega Menu versions 1.4.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Themeum WP Mega Menu. Recommendations: For WP Mega Menu versions 1.4.2 and earlier, update to a...

PT-2024-12721 · Onthegosystems · Onthegosystems Language

Name of the Vulnerable Software and Affected Versions: OnTheGoSystems Language versions 1.2.1 and earlier Description: The issue affects the OnTheGoSystems Language, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This...

PT-2024-12456 · Cleantalk · Cleantalk-Spam-Protect

Name of the Vulnerable Software and Affected Versions: CleanTalk Spam Protection versions 6.10 and below Description: The issue is related to a Missing Authorization vulnerability, which allows for broken access control. This can compromise the security of the site. The estimated number of...

PT-2024-17485 · WordPress · The Hash Form – Drag & Drop Form Builder

Name of the Vulnerable Software and Affected Versions: Hash Form – Drag & Drop Form Builder plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to a missing capability check when creating form styles. This allows authenticated attackers with Contributor-lev...

PQClean has a correctness error in HQC decapsulation

Impact A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is incorrectly treated as non-secret data. This results in an incorrect shared secret value being returned when the decapsulation...

Amazon Linux 2 : kernel (ALAS-2021-1634)

The version of kernel installed on the remote host is prior to 4.14.231-173.361. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1634 advisory. A low severity issue was found in the Nitro Enclaves Linux kernel driver that could lead to local privilege escalation. The...

Siemens Simcenter Femap

SUMMARY Simcenter Femap contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead...

Siemens Teamcenter Visualization 

SUMMARY Siemens Teamcenter Visualization contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially...

KLA78032 Multiple vulnerabilities in Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in media can be exploited t...

PT-2024-34459 · Silicon · Z-Wave Series 700 +1

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: Insecure permissions in the software allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...

PT-2024-9602 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30730, 20.005.30710, 24.001.30193, 24.001.30213, 24.005.20307 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the...