PT-2024-27900 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is being actively exploited. No further details are available about the nature of the issue or its potential impact. Recommendations: ...

PT-2024-38528 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue in question has been either rejected or withdrawn by its assigning authority. No further details are available regarding the nature of the issue or its potential...

PT-2024-29907 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further details are provided about the issue. Recommendations: At the...

PT-2024-38046 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue's details are not provided due to the withdrawal of the CVE ID by the CVE Numbering Authority. Recommendations: At the moment, there i...

PT-2024-38781 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2024-6112 · Google +10 · Go +10

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.23.1 Go versions prior to 1.22.7 Description: The issue is related to the Parse function in the Go programming language, which can cause a panic due to stack exhaustion when dealing with deeply nested expressions in a "...

PT-2024-26329 · Ibm · Ibm Security Verify Access

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0 through 10.0.8 Description: The issue allows a remote authenticated attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a...

Improper Verification Of Cryptographic Signature

org.springframework.boot:spring-boot-loader and org.springframework.boot:spring-boot-loader-classic are vulnerable to Improper Verification of Cryptographic Signature due to the signature verification process in nested jar files. An attacker can manipulate the signature to appear as if it was...

Informational Bulletin: Impact of OpenSSL Vulnerabilities CVE-2024-5535 and CVE-2024-6119

The Palo Alto Networks Product Security Assurance team has evaluated CVE-2024-5535 and CVE-2024-6119 as they relate to our products. PAN-OS, Cloud NGFW, Prisma Access, and Cortex XDR Agent are not affected by CVE-2024-5535 or CVE-2024-6119. At present, no other Palo Alto Networks products are kno...

WordPress e2pdf Plugin <= 1.25.05 is vulnerable to Cross Site Scripting (XSS)

Software e2pdf Type Plugin Vulnerable versions = 1.25.05 Fixed in 1.25.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43318 Patch priority Low CVSS severity Low 6.5 Developer E2Pdf.com PSID 618e2ecf6073 Credits LVT-tholv2k Required privilege Contributor Publish...

PT-2024-38629 · Sourcecodester · Sourcecodester Yoga Class Registration System

Name of the Vulnerable Software and Affected Versions: SourceCodester Yoga Class Registration System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown processing of the file /admin/inquiries/view inquiry.php. The manipulation of th...

PT-2024-30529 · Zkvyper · Zkvyper

Name of the Vulnerable Software and Affected Versions: zkvyper versions 1.3.12 through 1.5.3 Description: The issue arises from the compilation of LLL IR to a loop with a late exit condition, potentially leading to a loss of funds or unwanted behavior if the loop body contains specific conditions...

PT-2024-27506 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection is mentioned, but no further details are provided about the issue. There is a reference to an external link, but it...

CVE-2024-7560

CVE-2024-7560 (News Flash Theme – WordPress) is a PHP Object Injection vulnerability affecting all versions up to 1.1.0, exploitable via deserialization of untrusted input from the newsflash_post_meta meta value. The issue permits authenticated attackers with Editor-level access and above to inje...

CVE-2024-7560 News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection

The News Flash theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input from the newsflashpostmeta meta value. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a PH...

WordPress Multipurpose Theme <= 1.2.0 is vulnerable to PHP Object Injection

Software Multipurpose Type Theme Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-7486 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 5a908ef6f2c7 Credits Francesco Carlucci Required privilege...

PT-2024-28262 · Horizon Business Services Inc. · Caterease

Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against...

PT-2024-38289 · Point B · Getscreen Agent

Name of the Vulnerable Software and Affected Versions: Point B Ltd Getscreen Agent version 2.19.6 Description: A critical issue was found in the Installation component of the software, specifically in the getscreen.msi file, which leads to the creation of a temporary file with insecure permission...

PT-2024-8394 · Unknown · Edna Chat Center

Name of the Vulnerable Software and Affected Versions: edna Chat Center affected versions not specified Description: The issue is related to improper access control in the edna Chat Center customer service system. Exploitation of this issue may allow a remote attacker to gain unauthorized access ...

PT-2024-28222 · Openai · Chatgpt Chatbot

Name of the Vulnerable Software and Affected Versions: AI Engine: ChatGPT Chatbot versions n/a through 2.4.7 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This allows for Server Side Request Forgery in the ChatGPT Chatbot. Recommendations: For versions n/a...