KLA67582 RCE vulnerability in LibreOffice

Remote code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary unchecked script. Original advisories CVE-2024-3044: Graphic on-click binding allows unchecked script execution Related products LibreOffice CVE list CVE-2024-3044 hig...

PT-2024-3545 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-25773 · Ofcms · Ofcms

Name of the Vulnerable Software and Affected Versions: OFCMS version 1.1.2 Description: The issue allows for SQL Injection via the new table function. Recommendations: For OFCMS version 1.1.2, update to a version that fixes this issue, however at the moment, there is no information about a newer...

PT-2024-3496 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Adobe Acrobat versions prior to the fixed version Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code executi...

PT-2024-24542 · WordPress · Post Grid

Name of the Vulnerable Software and Affected Versions: The Post Grid Gutenberg Blocks and WordPress Blog Plugin versions prior to 4.0.2 Description: The issue arises from the plugin's failure to validate and escape some of its block options before outputting them back in a page or post where the...

PT-2024-26220 · Kiboko · Kiboko Labs Arigato Autoresponder/Newsletter

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Arigato Autoresponder and Newsletter versions 2.7.2.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions ...

PT-2024-12693 · Ibm +3 · Ibm Sdk +4

Name of the Vulnerable Software and Affected Versions: IBM SDK, Java Technology Edition versions 7.1.0.0 through 7.1.5.21 IBM SDK, Java Technology Edition versions 8.0.0.0 through 8.0.8.21 Description: The issue is related to a denial of service attack due to improper enforcement of the JEP 290...

PT-2024-29467 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.83 Description: A buffer error may allow attackers malicious read access to memory. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.83, consider updating to a version that fixes t...

PT-2024-25990 · Unknown · Wpsoul Table Maker

Name of the Vulnerable Software and Affected Versions: Wpsoul Table Maker versions 1.9.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2024-24759 · WordPress · Heateor Social Login

Name of the Vulnerable Software and Affected Versions: Heateor Social Login WordPress versions prior to 1.1.32 Description: The issue allows for a cross-site scripting vulnerability. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using th...

PT-2024-25984 · Zotpress · Zotpress

Name of the Vulnerable Software and Affected Versions: Zotpress versions through 7.3.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This can potentially affect a large number of devic...

PT-2024-22809 · Ubiquiti · Unifi Connect Ev Station Pro +3

Name of the Vulnerable Software and Affected Versions: UniFi Connect EV Station versions 1.1.18 and earlier UniFi Connect EV Station Pro versions 1.1.18 and earlier UniFi Connect Display versions 1.9.324 and earlier UniFi Connect Display Cast versions 1.6.225 and earlier Description: An Unverifie...

PT-2024-27666 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a local attacker to cause a service crash through an integer overflow. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue...

PT-2024-25545 · Unknown · Academy Lms

Name of the Vulnerable Software and Affected Versions: Academy LMS versions 1.9.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in Academy LMS. Recommendations: For versions 1.9.16 and earlier, update to a version that includes a fix for this issue, as no...

PT-2024-22541 · Yzmcms · Yzmcms

Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.0 Description: The issue allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. This is a Cross Site Scripting XSS issue. Recommendations: For YzmCMS version 7.0, update to a...

Important: glibc

Issue Overview: The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. CVE-2024-2961...

PT-2024-26238 · WordPress · Exclusive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Exclusive Addons for Elementor plugin for WordPress versions up to, and including, 2.6.9.4 Description: The issue is related to Reflected Cross-Site Scripting via the Countdown Expired Title due to insufficient input sanitization and output...

PT-2024-18663 · WordPress · Eleforms

Name of the Vulnerable Software and Affected Versions: EleForms – All In One Form Integration including DB for Elementor plugin for WordPress versions up to, and including, 2.9.9.7 Description: The issue allows unauthorized access to data due to a missing capability check when downloading form...

PT-2024-28534 · Woocommerce · Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce plugin versions up to, and including, 7.1.8 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability of this issue depend on what other plugins are...

PT-2024-25544 · Weblizar · Weblizar School Management Pro

Name of the Vulnerable Software and Affected Versions: Weblizar School Management Pro versions through 10.3.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation...