PT-2024-1753 · Adobe · Acrobat 2020 +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 20.005.30539 Adobe Acrobat Reader versions 20.005.30539 and earlier Adobe Acrobat 2020 versions prior to 20.005.30539 Adobe Acrobat Reader 2020 versions prior to 20.005.30539 Adobe Acrobat Reader versions...

PT-2024-1878 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application, making it susceptible to SQL injection. This could allow an unauthenticated remote attacker to execute arbitrary SQL queries on...

PT-2024-2738 · Intel · Intel Killer Wi-Fi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software versions prior to 22.240 Description: The issue is related to improper input validation in some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software, which may allow a privileged...

PT-2024-1765 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to an out-of-bounds read operation in memory, which could allow an attacker to disclose sensitive information. Exploitation of this issue requires user...

PT-2024-3431 · Adobe · Acrobat 2020 +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier Adobe Acrobat 2020 and Adobe Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability when handling AcroForms in PDF files. This could allow a...

PT-2024-1758 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to a buffer overflow operation in the memory of the Adobe Substance 3D Painter program, which can allow an attacker to execute arbitrary code. Exploitation of...

PT-2024-17130 · WordPress · Bold Page Builder

Name of the Vulnerable Software and Affected Versions: The Bold Page Builder plugin for WordPress versions up to, and including, 4.8.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Icon Link due to insufficient input sanitization and output escaping. This allow...

PT-2024-2733 · Intel · Intel Killer Wi-Fi +1

Name of the Vulnerable Software and Affected Versions: Intel PROSet/Wireless and Intel Killer Wi-Fi software versions prior to 22.240 Description: The issue is related to insufficient adherence to expected conventions in some Intel PROSet/Wireless and Intel Killer Wi-Fi software, which may allow ...

PT-2024-2661 · Siemens · Solid Edge +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V35.0.263 Parasolid versions prior to V35.1.252 Parasolid versions prior to V36.0.198 Solid Edge SE2023 versions prior to V223.0 Update 11 Solid Edge SE2024 versions prior to V224.0 Update 3 Description: The issue ...

CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

PT-2024-20748

Name of the Vulnerable Software and Affected Versions: WP Swings Coupon Referral Program versions 1.7.2 and earlier Description: The issue is related to Deserialization of Untrusted Data in WP Swings Coupon Referral Program. This can potentially lead to exploitation. No information is provided...

PT-2024-2333

Name of the Vulnerable Software and Affected Versions Bricks Builder versions 1.9.6 and earlier Description A critical remote code execution vulnerability in Bricks Builder, a WordPress site builder, allows unauthenticated attackers to execute arbitrary PHP code on vulnerable installations. This...

UBUNTU-CVE-2024-24821

Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the invocation of Composer and in the context of the executing user. As such, under certain conditions arbitrary code execution may lead to local...

CVE-2024-25107 Cross-Site Scripting in WikiDiscover

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the Language::date function is used when making the human-readable timestamp for inclusion on the wikicreation column. This function uses interface messages to translate the nam...

PT-2024-20633 · Unknown · Wonder Slider Lite

Name of the Vulnerable Software and Affected Versions: Wonder Slider Lite versions through 13.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS. Recommendations: For versions through...

Important: python-pillow

Issue Overview: Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter. CVE-2023-50447 Affected Packages: python-pillow Issue Correction: Run dnf update...

PT-2024-1609 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.160 Description: The issue is related to a use after free in Mojo, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code...

PT-2024-15753 · WordPress · Filebird

Name of the Vulnerable Software and Affected Versions: FileBird plugin for WordPress versions up to, and including, 5.5.8.1 Description: The issue is related to Stored Cross-Site Scripting via imported folder titles due to insufficient input sanitization and output escaping. This allows...

PT-2024-15624 · Themeisle · Orbit Fox

Name of the Vulnerable Software and Affected Versions: The Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.27 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Pricing Table Elementor Widget due to insufficient input sanitization and...

PT-2024-18732 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.63.6 Description: The issue allows local attackers to access sensitive information via implicit intent due to an implicit intent hijacking vulnerability in the In-App Purchase IAP component of the Galaxy...