CVE-2024-8749

SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cmdb/isysapimodelcmdbobjectsbyrelation.class.php and retrieve all the information stored in the...

PT-2024-6221 · Avg · Avg Internet Security

Name of the Vulnerable Software and Affected Versions: AVG Internet Security version v24 Description: A local privilege escalation issue in AVG Internet Security allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking. This issue is related to the use of dangerous...

PT-2024-39225 · Unknown · I-Doit Pro

Name of the Vulnerable Software and Affected Versions: idoit pro version 28 Description: A Cross-site Scripting XSS issue allows an attacker to retrieve session details of an authenticated user due to the lack of proper sanitization of the following parameters: id, lang, mNavID, name, pID,...

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which originates from a SQL injection vulnerability in the mock exam method...

libreoffice: Ability to trust not validated macro signatures removed in high security mode

A vulnerability was found in versions of LibreOffice from 24.2 to before 24.2.5. When a document containing a signed macro fails verification, LibreOffice will display a warning which the user can choose to ignore the failure and enable the macro anyways...

SUSE CVE-2024-23981

Wrap-around error in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2024-24986

Improper access control in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-27243 · Unknown · Ada Web Server

Name of the Vulnerable Software and Affected Versions: Ada Web Server version 20.0 Description: An issue was discovered in Ada Web Server when configured to use SSL, which is not the default setting. The SSL/TLS used to establish connections to external services is done without proper hostname...

WithSecure Elements 安全漏洞

WithSecure Elements is an online tool from the Finnish company WithSecure. It is used to transform data into customizable and informative reports and dashboards. A security vulnerability exists in WithSecure Elements version 23.x and earlier versions. An attacker can elevate privileges by...

NI I/O Trace Tool 安全漏洞

NI I/O Trace Tool National Instruments I/O Trace Tool is a utility program from National Instruments NI. It can be used to view ongoing VISA driver calls, parameters passed to the VISA driver calls, and results. A security vulnerability exists in NI I/O Trace Tool version 24.3 and earlier, which...

7-Zip Security Vulnerabilities

7-Zip is a compression software. A security vulnerability exists in versions prior to 7-Zip 24.01, which stems from an out-of-bounds read vulnerability in the NtfsHandler.cpp NTFS handler program that allows an attacker to read more than the expected buffer...

Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. A security vulnerability exists prior to Intel Wireless Bluetooth version 23.20, which stems from the presence of an improper condition checking issue. It could...

WordPress plugin Yoast SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

May 14, 2024-KB5038285 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

WordPress Yoast SEO plugin <= 22.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Bassem Essam in WordPress Plugin Yoast SEO versions = 22.5...

VulnCheck KEV: CVE-2024-32778

Missing Authorization vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4...

WBSAirback Cross-Site Request Forgery Vulnerability

WBSAirback is a next generation storage and backup system from WBSAirback. A cross-site request forgery vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to forge a malicious request to trick a victim into clicking on it to perform a sensitive operation...

Vulnerabilities fixed in Ivanti Connect Secure and Policy Secure Gateways

Ivanti has fixed vulnerabilities in Ivanti Connect Secure and Policy Secure. The vulnerabilities allow an unauthenticated malicious party able to remotely perform a Denial of Service execution. For CVE-2024-21894, Ivanti indicates that in certain circumstances could potentially lead to the...

Gibbon 安全漏洞

Gibbon is a school platform that solves real-world problems that educators encounter every day. A security vulnerability exists in Gibbon version 26.0.00 that stems from the presence of a server-side template injection vulnerability. An attacker exploiting this vulnerability could perform remote...

PT-2024-2291 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0, 23.0.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Animate, which could lead to the disclosure of sensitive memory. An attacker could leverage this vulnerability t...