PT-2024-32949 · Unknown · Featured Posts With Multiple Custom Groups

Name of the Vulnerable Software and Affected Versions: Featured Posts with Multiple Custom Groups FPMCG versions n/a through 4.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For versions n/a through 4.0, update ...

PT-2024-33438 · Peprodev · Peprodev Ultimate Invoice

Name of the Vulnerable Software and Affected Versions: PeproDev Ultimate Invoice versions through 2.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: Fo...

PT-2024-9995 · Drupal +1 · Drupal Core +1

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 10.0.0 through 10.2.9 Description: A vulnerability in Drupal Core allows file manipulation. This issue is related to weaknesses in handling error situations, which could allow a remote attacker to impact the integrity of...

CVE-2024-47826 eLabFTW vulnerable to HTML Injection in extended search error message

eLabFTW is an open source electronic lab notebook for research labs. A vulnerability in versions prior to 5.1.5 allows an attacker to inject arbitrary HTML tags in the pages: "experiments.php" show mode, "database.php" show mode or "search.php". It works by providing HTML code in the extended...

PT-2024-7979 · Nvidia · Nvidia Nemo

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo versions up to r2.0.0rc0 Description: The issue is related to the SaveRestoreConnector function in NVIDIA NeMo, which is associated with incorrect restriction of the directory path name with limited access. Exploitation of this...

Medium: libtiff

Issue Overview: libtiff: NULL pointer dereference in tifdirinfo.c CVE-2024-7006 Affected Packages: libtiff Issue Correction: Run dnf update libtiff --releasever 2023.6.20241010 or dnf update --advisory ALAS2023-2024-720 --releasever 2023.6.20241010 to update your system. More information on how t...

Medium: clamav

Issue Overview: A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacke...

PT-2024-39717 · WordPress · Increase Upload File Size & Maximum Execution Time Limit

Name of the Vulnerable Software and Affected Versions: Increase upload file size & Maximum Execution Time limit plugin for WordPress versions up to and including 2.0 Description: The plugin is susceptible to Reflected Cross-Site Scripting due to the improper use of add query arg without adequate...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Oct-1 2024)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2024-32570 · WordPress · Simple Membership After Login Redirection

Name of the Vulnerable Software and Affected Versions: Simple Membership After Login Redirection versions 1.6 and earlier Description: A high-severity open redirection vulnerability has been identified, allowing URL redirection to untrusted sites. This issue affects the WordPress Simple Membershi...

PT-2024-28543 · Dell · Dell Appsync Server

Name of the Vulnerable Software and Affected Versions: Dell AppSync Server versions 4.3 through 4.6 Description: The issue is related to an XML External Entity Injection, which could be exploited by an adjacent high privileged attacker, potentially leading to information disclosure...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-2580)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA77343 SB vulnerabilities in Apache Tomcat

Security vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions. Original advisories Apache Tomcat 9.0 vulnerabilities Exploitation Public exploits exist for this vulnerability. Related products Apache-Tomcat CVE list...

PT-2024-7118 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.0.3 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, whe...

PT-2024-11700 · WordPress · Limit Login Attempts

Name of the Vulnerable Software and Affected Versions: Limit Login Attempts Spam Protection plugin for WordPress versions up to, and including, 5.3 Description: The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login...

PT-2024-7121 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.6, 2022.4 and earlier Description: The issue is caused by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2024-6958 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated...

PT-2025-11513 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to an Execution with Unnecessary Privileges vulnerability. A low-privileged attacker with remote access could potentially exploit this...

PT-2024-6719 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5709 Description: The issue is related to a use-after-free vulnerability in the Remote Desktop Protocol RDP Client of Windows operating systems. This vulnerability can be exploited by a remote...

PT-2024-21909 · Hewlett Packard · Hp Hotkey Support

Name of the Vulnerable Software and Affected Versions: HP Hotkey Support affected versions not specified Description: A potential security issue has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. This could let someone gain higher access rights...