PT-2024-17425 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was initially reported but later rejected as a candidate, and its usage was prevented. No further details are available about the natu...

PT-2024-31753 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon centreon-bam versions 22.10 through 24.04 Description: A problem was discovered in the user-settings form of Centreon centreon-bam, where SQL injection can occur. The exploitation of this issue is only accessible to authenticated use...

PT-2024-35879 · Unknown · Content Audit Exporter

Name of the Vulnerable Software and Affected Versions: Content Audit Exporter versions 1.1 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. This is due to a vulnerability in the...

PT-2024-9113 · Moby +5 · Moby +5

Name of the Vulnerable Software and Affected Versions: moby version 25.0.5 Description: The issue is related to a race condition in the builder/builder-next/adapters/snapshot/layer.go file. This could be used to trigger concurrent builds that invoke the EnsureLayer function, resulting in resource...

PT-2024-39171 · Cri-O · Cri-O

Name of the Vulnerable Software and Affected Versions: CRI-O versions prior to 1.29.11 CRI-O versions 1.30.0 through 1.30.8 CRI-O versions 1.31.0 through 1.31.3 Description: A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be aske...

PT-2024-9961 · Mozilla +5 · Thunderbird +7

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Thunderbird versions prior to 133 Firefox ESR versions prior to 128.7 Thunderbird versions prior to 128.7 Description: A double-free issue could occur in the sec pkcs7 decoder start decrypt function when handling...

CVE-2024-11409 Grid View Gallery <= 1.0 - Authenticated (Editor+) PHP Object Injection

The Grid View Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input from csallphotosdetails parameter. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a...

PT-2024-33322 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is being actively exploited. No further details are available about the nature of the issue or its potential impact. Recommendations: ...

WordPress Wawp Plugin < 3.0.18 is vulnerable to Broken Authentication

Software Wawp Type Plugin Vulnerable versions 3.0.18 Fixed in 3.0.18 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-52475 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4c22e2281ddc Credits stealthcopter...

PT-2024-8904

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. through 8.1.30 PHP versions 8.2. through 8.2.25 PHP versions 8.3. through 8.3.13 Description: The issue is related to the ldap escape function in PHP, which can cause an integer overflow when given uncontrolled long string...

PT-2024-35211 · Unknown · Do That Task

Name of the Vulnerable Software and Affected Versions: Do That Task versions 1.5.5 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access to the...

Cisco Meeting Server Information Disclosure Vulnerability (CNVD-2024-45293)

Cisco Meeting Server Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. An information disclosure vulnerability exists in Cisco Meeting Server, which stems from improper storage of sensitive information in the Web management...

PT-2024-33129 · Abb · Abb Drive Composer

Name of the Vulnerable Software and Affected Versions: DotNetZip versions 1.16.0 and earlier ABB Drive Composer versions prior to 2.9.1 Description: The issue allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component. This affects products that are no...

PT-2024-34860 · Tre Technology Research S.R.L · Hq60 Fidelity Card

Name of the Vulnerable Software and Affected Versions: TRe Technology And Research S.R.L HQ60 Fidelity Card versions 1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected...

PT-2024-34885 · Twig +3 · Twig +3

Name of the Vulnerable Software and Affected Versions: Twig versions prior to 3.11.2 Twig versions prior to 3.14.1 Description: In a sandbox, an attacker can call toString on an object even if the toString method is not allowed by the security policy when the object is part of an array or an...

PT-2025-11661

Name of the Vulnerable Software and Affected Versions Synology BeeStation Manager BSM versions prior to 1.1-65374 Synology DiskStation Manager DSM versions prior to 6.2.4-25556-8 Synology DiskStation Manager DSM versions prior to 7.1.1-42962-7 Synology DiskStation Manager DSM versions prior to...

PT-2024-24926 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.11 Combodo iTop versions prior to 3.0.5 Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0 Description: Combodo iTop is a simple, web-based IT Service Management tool. The issue allows...

PT-2024-18605 · Mms · Mms

Name of the Vulnerable Software and Affected Versions: mms affected versions not specified Description: The issue is related to a possible out of bounds write in mms due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2024-18594 · Ccu · Ccu

Name of the Vulnerable Software and Affected Versions: ccu affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in ccu. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2024-27303 · Unknown · Wishlist Member

Name of the Vulnerable Software and Affected Versions: WishList Member X versions 3.26.6 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows unauthorized access to files and directories outsid...