Medium: tpm2-tss

Issue Overview: tpm2-tss: arbitrary quote data may go undetected by FapiVerifyQuote CVE-2024-29040 Affected Packages: tpm2-tss Issue Correction: Run dnf update tpm2-tss --releasever 2023.5.20240819 or dnf update --advisory ALAS2023-2024-703 --releasever 2023.5.20240819 to update your system. More...

PT-2024-30520 · Unknown · Givingpress Lite

Name of the Vulnerable Software and Affected Versions: GivingPress Lite versions 1.8.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, allowing Stored XSS. This means an attacker can inject malicious scripts into the website, potential...

PT-2024-30494 · Unknown · Invite Anyone

Name of the Vulnerable Software and Affected Versions: Invite Anyone versions 1.4.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. Recommendations: For versions 1.4.7...

PT-2024-5917 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.113 Description: The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML...

PT-2024-21149 · Octobercms · October Cms Bloghub Plugin

Name of the Vulnerable Software and Affected Versions: October CMS Bloghub Plugin versions 1.3.8 and lower Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section. This can lead to the execution...

PT-2024-9652 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary code in the context of the victim's browser. This occurs when...

PT-2024-6341

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 129.0.6668.58 Description The issue is related to an inappropriate implementation in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit stack corruption via a crafted HTML...

PT-2025-18317

Name of the Vulnerable Software and Affected Versions XWiki versions 1.8.1 through 14.10.21 XWiki versions 15.0-rc-1 through 15.10.11 XWiki versions 16.0.0-rc-1 through 16.4.2 XWiki versions 16.5.0-rc-1 through 16.6.x Description The issue allows anyone to access the metadata of any attachment in...

PT-2024-21659 · Unknown · Comfortkey

Name of the Vulnerable Software and Affected Versions: ComfortKey versions prior to 24.1.2 Description: A Local File Inclusion issue has been found in ComfortKey, allowing an unauthenticated attacker to retrieve sensitive system information. Recommendations: For versions prior to 24.1.2, update t...

Intel VTune Profiler Software Advisory - Lenovo Support US

No description provided...

Intel VROC Software Advisory - Lenovo Support US

No description provided...

AMD Uninitialized GPU Register Access Advisory - Lenovo Support US

No description provided...

PT-2024-8044 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 13.0.8, 14.1.1 and earlier Description: The issue is caused by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

PT-2024-8567 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions ID18.5.2 and earlier Adobe InDesign version ID19.4 Description: The issue is related to a heap-based buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code. Exploitation of this issu...

Security Updates for Azure Connected Machine Agent (August 2024)

The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.44. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

PT-2024-34336

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads versions through 3.2.12 Description The software contains a flaw related to the improper handling of special characters within SQL commands, leading to a potential SQL injection issue. This allows for the execution of...

PT-2024-37824 · WordPress · Generate Images

Name of the Vulnerable Software and Affected Versions: Generate Images WordPress plugin versions prior to 5.2.8 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, ...

PT-2024-30389 · Themelooks · Themelooks Enter Addons

Name of the Vulnerable Software and Affected Versions: ThemeLooks Enter Addons versions n/a through 2.1.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in ThemeLooks Enter Addons...

PT-2024-30342 · Beaver Builder · Ultimate Addons For Beaver Builder – Lite

Name of the Vulnerable Software and Affected Versions: Ultimate Addons for Beaver Builder – Lite versions 1.5.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

PT-2024-19108 · Enphase · Enphase Iq Gateway

Name of the Vulnerable Software and Affected Versions: Enphase IQ Gateway formerly known as Envoy versions 4.x through 8.0 and less than 8.2.4225 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This...