PT-2024-19588 · Unknown · Axe Credit Portal

Name of the Vulnerable Software and Affected Versions: Axe Credit Portal versions 3.0 and later Description: The issue allows authenticated attackers to execute unintended queries and disclose sensitive information from database tables via crafted requests, specifically through the Save Favorite...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1556)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-24552 · Inducer · Inducer

Name of the Vulnerable Software and Affected Versions: inducer versions prior to 2024.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature. Recommendations: For versions prior to 2024.1, update to version 2024.1 or later to...

PT-2024-24778 · Woocommerce · Active Products Tables For Woocommerce

Name of the Vulnerable Software and Affected Versions: Active Products Tables for WooCommerce versions 1.0.6.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Active Products Tables for WooCommerce plugin. Recommendations: For versions 1.0.6.2 and...

PT-2024-24725

Name of the Vulnerable Software and Affected Versions ThemeKraft WooBuddy versions 3.4.20 and earlier Description The issue is related to the deserialization of untrusted data, which can lead to potential security risks. There is no information provided about the estimated number of potentially...

PT-2024-23869 · Unknown · Really Simple Ssl

Name of the Vulnerable Software and Affected Versions: Really Simple SSL versions through 7.2.3 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker can potentially trick the server into making unauthorized requests, leading to various malicious...

PT-2024-24700 · Unknown · Gloriafood Restaurant Menu – Food Ordering System – Table Reservation

Name of the Vulnerable Software and Affected Versions: GloriaFood Restaurant Menu – Food Ordering System – Table Reservation versions through 2.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

PT-2024-24693 · Bdthemes · Bdthemes Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: BdThemes Element Pack Elementor Addons versions through 5.6.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2024-24699 · 10Web · 10Web Slider

Name of the Vulnerable Software and Affected Versions: 10Web Slider by 10Web versions 1.2.54 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versio...

PT-2024-24644 · Unknown · Theme My Login

Name of the Vulnerable Software and Affected Versions: Theme My Login versions 7.1.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in Theme My Login. Recommendations: For Theme My Login versions 7.1.6 and earlier, update to a version later than 7.1.6 to...

PT-2024-24650 · Unknown · Simple Testimonials Showcase

Name of the Vulnerable Software and Affected Versions: Simple Testimonials Showcase versions 1.1.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts in...

Medium: krb5

Issue Overview: Kerberos 5 aka krb5 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmaprmt.c. CVE-2024-26458 Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. CVE-2024-26461 Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability ...

PT-2024-23166 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: A vulnerability could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables...

PT-2024-24646 · Jotform · Jotform Online Forms

Name of the Vulnerable Software and Affected Versions: Jotform Online Forms versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

PT-2024-24517 · Wondercms · Wondercms

Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: Multiple cross-site scripting XSS vulnerabilities in the HOW TO page of WonderCMS allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...

PT-2024-24643 · Woocommerce · Nuggethon Custom Order Statuses For Woocommerce

Name of the Vulnerable Software and Affected Versions: Nuggethon Custom Order Statuses for WooCommerce versions 1.5.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Custom Order Statuses for WooCommerce plugin. Recommendation...

PT-2024-3739

Name of the Vulnerable Software and Affected Versions: Oracle Java SE version 8u401 Oracle GraalVM Enterprise Edition versions 20.3.13 and 21.3.9 Description: The issue is related to a vulnerability in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition, which is associat...

PT-2024-21638 · Microsoft · Msal.Net

Name of the Vulnerable Software and Affected Versions: MSAL.NET versions 4.48.0 through 4.60.0 Description: A malicious application running on a customer Android device can cause local denial of service against applications that were built using MSAL.NET for authentication on the same device, due...

PT-2024-3437 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul. This easily exploitable vulnerability allows ...

PT-2024-4906 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.16 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to...