PT-2024-18212 · WordPress · Avada

Name of the Vulnerable Software and Affected Versions: Avada | Website Builder For WordPress & WooCommerce theme for WordPress versions up to and including 7.11.5 Description: The issue allows authenticated attackers with contributor access and above to view the contents of all form submissions,...

PT-2024-25941 · Dcmtk +4 · Dcmtk +4

Name of the Vulnerable Software and Affected Versions: DCMTK versions prior to 3.6.9 Description: The issue is related to a segmentation fault in dcmnet, a component of DCMTK, which occurs when an invalid DIMSE message is received. Recommendations: For versions prior to 3.6.9, update to version...

PT-2024-18087 · WordPress · Photos/Files Contest Gallery Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Photos and Files Contest Gallery WordPress plugin versions prior to 21.3.1 Description: The issue concerns a lack of sanitization and escaping of certain parameters, potentially allowing Cross-Site Scripting attacks by users with a role as lo...

PT-2024-2550

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.4 iOS versions prior to 17.4 macOS versions prior to 13.6.7 watchOS affected versions not specified visionOS affected versions not specified tvOS affected versions not specified iOS 16.7.8 iPadOS 16.7.8 Description...

PT-2024-18736 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to v24.0.0.0 Description: The issue is related to missing proper interaction for opening deeplinks in Samsung Internet, allowing remote attackers to open an application without proper interaction...

PT-2024-21791 · Veritas · Veritas Ediscovery Platform

Name of the Vulnerable Software and Affected Versions: Veritas eDiscovery Platform versions prior to 10.2.5 Description: A vulnerability was discovered that allows the application administrator to upload potentially malicious files to arbitrary locations on the server where the application is...

PT-2024-15857 · WordPress · Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Happy Addons for Elementor plugin for WordPress versions up to, and including, 3.10.1 Description: The issue is related to Stored Cross-Site Scripting via the side image URL parameter in the Age Gate due to insufficient input sanitization...

OPENSUSE-SU-2024:0052-1 Security update for bitcoin

This update for bitcoin fixes the following issues: Update to version 26.0, including the following changes: - Enable LTO and test package for Leap - Enable sqlite3 support for wallet - Enable asm optimizations unconditionally...

PT-2024-14874 · Trellix · Trellix Central Management

Name of the Vulnerable Software and Affected Versions: Trellix Central Management versions prior to 9.1.3.97129 Description: A cross-site scripting issue allows a remote authenticated attacker to craft internal requests to the CM dashboard, causing arbitrary content to be injected into the respon...

PT-2024-1881 · Intel · Intel Ssu

Name of the Vulnerable Software and Affected Versions: IntelR SSU versions prior to 3.0.0.2 Description: The issue is related to an uncontrolled search path element in the Intel System Support Utility. This could allow an authenticated user to potentially enable escalation of privilege via local...

PT-2024-2705 · Intel · Intel Chipset Driver

Name of the Vulnerable Software and Affected Versions: IntelR Chipset Driver Software versions prior to 10.1.19444.8378 Description: The issue is related to incorrect default permissions in some IntelR Chipset Driver Software, which may allow an authenticated user to potentially enable escalation...

PT-2024-1872 · Intel · Intel Driver & Support Assistant

Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant versions prior to 23.4.33 Description: The issue is related to improper access control in Intel Driver & Support Assistant software, which may allow an authenticated user to potentially enable escalation of...

PT-2024-14986

Name of the Vulnerable Software and Affected Versions MİA-MED versions prior to 1.0.7 Description The issue is related to the exposure of sensitive information due to incompatible policies, allowing the collection of data as provided by users. Recommendations For versions prior to 1.0.7, update t...

PT-2024-1689 · Libgit2 +5 · Libgit2 +5

Name of the Vulnerable Software and Affected Versions: libgit2 versions prior to 1.6.5 libgit2 versions prior to 1.7.2 Description: The issue is related to a heap corruption vulnerability in the has dir name function in src/libgit2/index.c, which can be exploited for arbitrary code execution. Thi...

PT-2024-1574 · Google +5 · Skia +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.160 Description: The issue is related to a heap buffer overflow in the Skia graphics library of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page,...

PT-2024-1694 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue exists due to insufficient input validation in the authentication token handler component of the integrated development environment. This could allow a remote attacker ...

PT-2024-15159 · 10Web · 10Web Ai Assistant

Name of the Vulnerable Software and Affected Versions: 10Web AI Assistant versions up to, and including, 1.0.18 Description: The issue allows authenticated attackers with subscriber-level access and above to install arbitrary plugins, potentially gaining further access to a compromised site. This...

PT-2024-6574 · Cyberpower · Cyberpower Powerpanel Enterprise

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel Enterprise versions prior to 2.8.3 Description: A sql injection vulnerability exists in the query ptask lean function within MCUDBHelper, allowing an unauthenticated remote attacker to leak sensitive information. The...

CVE-2024-23841 XSS in @apollo/experimental-nextjs-app-support

apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this vulnerability, an attacker would need to either inject malicious input e.g. by redirecting...

PT-2024-9530 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 10.2.0 through 10.2.1 Drupal Core versions 10.1.0 through 10.1.7 Description: A vulnerability in Drupal Core allows Excessive Allocation, which can be exploited to trigger a denial of service DOS. The issue affects certai...