LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature

Summary A Stored Cross-Site Scripting XSS vulnerability in the "Device Dependencies" feature allows authenticated users to inject arbitrary JavaScript through the device name "hostname" parameter. This vulnerability can lead to the execution of malicious code in the context of other users'...

git-shallow-clone Argument Injection vulnerability

All versions of the package git-shallow-clone are vulnerable to Argument injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...

PT-2024-40587 · Git +1 · Libultrahdr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the format message function, which is called by...

PT-2024-31870 · Unknown · Blood Bank/Donation Management System

Name of the Vulnerable Software and Affected Versions: Blood Bank And Donation Management System version 1.0 Description: A Cross Site Scripting XSS issue in the add donor.php file allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed. This enables the...

PT-2024-28977 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for information about a specific issue, but no details are provided about the issue itself, including its nature, potential...

PT-2024-10158

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description A stack-buffer overflow has been detected in the vorbis handle identification packet function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels...

PT-2024-32073 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS versions 3.4.7 and earlier Description: An access control issue in the CheckVip function in UserController.java of IceCMS allows unauthenticated attackers to access and return all user information, including passwords. Recommendations:...

PT-2024-31675 · Zimbra · Zimbra Daffodil

Name of the Vulnerable Software and Affected Versions: Zimbra Daffodil version 10.1.1 Description: A Cross-Site Scripting issue has been identified. Recommendations: For Zimbra Daffodil version 10.1.1, apply the patch release to resolve the issue...

PT-2024-32293

Name of the Vulnerable Software and Affected Versions langchain experimental versions 0.1.17 through 0.3.0 Description The issue allows attackers to execute arbitrary code through sympy.sympify which uses eval in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in a specific commit on...

PT-2024-29111 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13.7.1 macOS versions prior to Sonoma 14.7.1 macOS versions prior to Sequoia 15 Description: A sandboxed application may be able to access sensitive user data due to insufficient checks. Recommendations: Update...

PT-2024-12599 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to a hard-coded password in Loftware Spectrum. This could potentially allow unauthorized access. Recommendations: For versions prior to 4.6 HF14, update to version...

PT-2024-30551 · Phoenix Contact · Fl Mguard 2102 +46

Name of the Vulnerable Software and Affected Versions: Firewall services affected versions not specified Description: A low-privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW NAT.IN IP environment variable, whic...

PT-2024-12594 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to Missing Authentication for a Critical Function. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2024-30667 · Send +1 · Send +1

Name of the Vulnerable Software and Affected Versions: Send versions prior to 0.19.0 Description: The issue arises from passing untrusted user input to SendStream.redirect, which can execute untrusted code. This occurs even when the input is sanitized. The library Send is used for streaming files...

PT-2024-31614

Name of the Vulnerable Software and Affected Versions: Twig versions prior to 1.44.8 Twig versions prior to 2.16.1 Twig versions prior to 3.14.0 Description: Under some circumstances, the sandbox security checks are not run, which allows user-contributed templates to bypass the sandbox...

PT-2024-9667 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting attacks. Remote authenticated users with...

PT-2024-31748

Name of the Vulnerable Software and Affected Versions: tgt versions prior to 1.0.93 Description: The issue is related to the Linux target framework tgt attempting to generate random numbers by using rand without srand, resulting in a predictable PRNG seed. This causes the sequence of challenges t...

PT-2024-38607 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific issue. It mentions a withdrawn CVE ID, indicating that the ID was rejected or...

PT-2025-11273 · Ibm · Ibm Security Qradar Edr

Name of the Vulnerable Software and Affected Versions: IBM Security QRadar version 3.12 EDR Description: The issue allows a local privileged user to read user credentials stored in plain text. Recommendations: For IBM Security QRadar version 3.12 EDR, consider restricting access to sensitive area...

PT-2024-40920 · Syn +1 · Syn +1

Name of the Vulnerable Software and Affected Versions: proc-macro-error affected versions not specified Description: The maintainer of proc-macro-error appears to be unreachable, with no commits for 2 years, no releases for 4 years, and no activity on the GitLab repository or response to emails...