PT-2024-13329 · Themify · Themify Ultra

Name of the Vulnerable Software and Affected Versions: Themify Ultra versions through 7.3.5 Description: This issue is related to a Missing Authorization vulnerability in Themify Ultra. The estimated number of potentially affected devices worldwide is not available. There is no information about...

PT-2024-13328 · Themify · Themify Ultra

Name of the Vulnerable Software and Affected Versions: Themify Ultra versions through 7.3.5 Description: The issue is related to a Missing Authorization vulnerability in Themify Ultra. This vulnerability allows unauthorized access, potentially leading to data breaches or other security incidents...

PT-2024-13643 · Crocoblock · Crocoblock Jetelements For Elementor

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions 2.6.13 and earlier Description: The issue is related to a Missing Authorization vulnerability in Crocoblock JetElements For Elementor. Recommendations: For versions 2.6.13 and earlier, update to a...

PT-2024-27022 · Ricoh · Ricoh Streamline Nx Pc Client

Name of the Vulnerable Software and Affected Versions: Ricoh Streamline NX PC Client versions 3.7.2 and earlier Description: The issue is related to the use of hard-coded credentials. If exploited, an attacker may obtain the LocalSystem Account of the PC where the product is installed, potentiall...

PT-2024-12580 · Brainstorm Force · Convert Pro

Name of the Vulnerable Software and Affected Versions: Convert Pro versions 1.7.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Brainstorm Force Convert Pro. Recommendations: For Convert Pro versions 1.7.5 and earlier, update to a version later than 1.7...

Python SSL Vulnerability (Jun 2024) - Windows

Python is prone to a vulnerability in the ssl module. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescripti...

PT-2024-27082 · Unknown · Byondreal Accessor

Name of the Vulnerable Software and Affected Versions: byondreal accessor version 1.0.0 and earlier Description: A Prototype Pollution issue allows an attacker to execute arbitrary code. The issue is related to the @byondreal/accessor/index module. Recommendations: For byondreal accessor version...

PT-2024-26945 · Freefrom · Freefrom

Name of the Vulnerable Software and Affected Versions: FreeFrom - the nostr client versions prior to 1.3.5 Description: The issue is related to improper verification of cryptographic signatures. This means the affected app cannot detect event data with invalid signatures, potentially allowing...

PT-2024-01: OS Command Injection in PT Network Attack Discovery (PT NAD)

The vulnerability was identified in PT NAD affecting versions 12.0.x to 12.0.577. The vulnerability can be exploited by an attacker with network access to PT NAD to remotely execute OS commands as a superuser. Ability of exploitation depends on the configuration. Authorization is not required for...

PT-2024-27813 · Unknown · Myfinances

Name of the Vulnerable Software and Affected Versions: MyFinances versions prior to 0.4.6 Description: The issue allows an actor to access personally identifiable information PII and financial information from another account while signed in as a user. This is due to a method in the application...

PT-2024-14156 · Woocommerce · Woocommerce Ship To Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Ship to Multiple Addresses versions 3.8.9 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Woo WooCommerce Ship to Multiple Addresses plugin. Recommendations: F...

Fedora 40 : chromium (2024-5acee8c47f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5acee8c47f advisory. update to 126.0.6478.55 High CVE-2024-5830: Type Confusion in V8 High CVE-2024-5831: Use after free in Dawn High CVE-2024-5832: Use after free in Da...

CVE-2024-5739

The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS UXSS vulnerability. This vulnerability allows for cross-site scripting XSS where arbitrary JavaScript can be executed in the top frame from an embedded iframe on any displayed web site within the in-app...

Medium: freerdp

Issue Overview: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible NULL access and crash. Version 3.5.1 contains a patch for the issue. No known workarounds are available. CVE-2024-32661 Affected Packages:...

Lenovo Service Bridge Vulnerability - Lenovo Support US

No description provided...

PT-2024-12077 · Themeum · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS versions 2.1.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themeum Tutor LMS. Recommendations: For versions 2.1.8 and earlier, update to a version later than 2.1.8 to resolve the issue...

PT-2024-24440 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.9.14 and earlier Description: The issue is related to a Missing Authorization vulnerability in Welcart e-Commerce. Recommendations: For versions 2.9.14 and earlier, update to a version that contains a fix for thi...

PT-2024-26160 · Softlab · Softlab Radio Player

Name of the Vulnerable Software and Affected Versions: SoftLab Radio Player versions 2.0.73 and earlier Description: The issue is related to a Missing Authorization vulnerability in SoftLab Radio Player. Recommendations: For versions 2.0.73 and earlier, update to a version that contains a fix for...

PT-2024-14173 · Soliloquy · Slider

Name of the Vulnerable Software and Affected Versions: Slider by Soliloquy versions 2.7.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorized access or actions...

PT-2024-26221 · Themeboy · Sportspress

Name of the Vulnerable Software and Affected Versions: SportsPress – Sports Club & League Manager versions 2.7.20 and earlier Description: The issue is related to a Missing Authorization vulnerability in the ThemeBoy SportsPress – Sports Club & League Manager plugin. Recommendations: For versions...