PT-2024-30259 · Rws · Rws Multitrans

Name of the Vulnerable Software and Affected Versions: RWS MultiTrans versions 7.0.23324.2 and earlier Description: The issue allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail. Recommendations: For RWS MultiTrans...

PT-2024-19030 · WordPress · Houzez Login Register

Name of the Vulnerable Software and Affected Versions: Houzez Login Register versions 3.2.5 and earlier Description: A Privilege Escalation issue has been identified in the Houzez Login Register plugin. Recommendations: For Houzez Login Register versions 3.2.5 and earlier, update to a version tha...

PT-2024-30840 · Elementor · The Plus Addons For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Page Builder Lite versions n/a through 5.6.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

PT-2024-30838 · Highwarden · Highwarden Super Store Finder

Name of the Vulnerable Software and Affected Versions: highwarden Super Store Finder versions n/a through 6.9.7 Description: The issue affects highwarden Super Store Finder, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables attacker...

Fortinet FortiAnalyzer Authorization Bypass (FG-IR-23-204)

The remote host is running a version of FortiAnalyzer that is 6.2.x, 6.4.x, 7.0.x, 7.2.x through 7.2.4, or 7.4.x through 7.4.1. It is, therefore, affected by an authorization bypass vulnerability through user-controlled key CWE-639 vulnerability that may allow a remote attacker with low privilege...

PT-2024-30867 · Pickplugins · Pickplugins Team Showcase

Name of the Vulnerable Software and Affected Versions: PickPlugins Team Showcase versions 1.22.25 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: F...

PT-2024-37597 · Unknown · Insuree Gl

Name of the Vulnerable Software and Affected Versions: InsureE GL versions prior to 4.6.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which can be exploited by attacke...

PT-2024-29050 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. A malicious app may be able to change network settings. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolve t...

PT-2024-30999 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.7 iPadOS versions prior to 17.7 macOS Ventura versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 Description: The issue allows an app to bypass Privacy preferences. This was...

PT-2024-30985 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions, which may have allowed an app to access protected user data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to...

PT-2024-7437

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15 Description A security issue exists in macOS related to deficiencies in access control. Exploitation of this issue may allow an attacker to bypass privacy settings. Microsoft discovered this flaw, dubbed "HM...

PT-2024-22103 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.7 iPadOS versions prior to 17.7 Description: The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected app termination. Recommendations: For iOS versions prior to 17.7, update to...

PT-2024-39161 · WordPress · Wp Simple Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Simple Booking Calendar plugin for WordPress versions up to, and including, 2.0.10 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without appropriate escaping on the...

PT-2024-32775

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved, which could lead to memory leaks. The issue is related to the bpf helpers that had ARG PTR TO LONG,INT as input arguments. In case of an...

PT-2024-39183 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.34.2 Description: A remote code execution RCE vulnerability exists via crafted extension publisher-url/additional-urls that could be abused by a malicious extension. This issue can be exploited to execute co...

PT-2024-35361

Name of the Vulnerable Software and Affected Versions GNOME libsoup versions prior to 3.6.1 Description The issue is related to an infinite loop and memory consumption during the reading of certain patterns of WebSocket data from clients. Recommendations For versions prior to 3.6.1, update to...

PT-2024-6586 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to insufficient server-side controls in the management console of Ivanti Workspace Control, which can be exploited by a local authenticated attacker to...

PT-2024-29881 · Siemens · Sinema Remote Connect Client

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Client versions prior to V3.2 SP2 Description: A vulnerability has been identified where the affected application inserts sensitive information into a log file. This log file is readable by all legitimate users of the...

Fedora: Security Advisory (FEDORA-2023-1afa208698)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-32)

QNAP QuTS hero is prone to multiple OS command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...