Microsoft Releases May 2024 Security Updates

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisory and apply the necessary updates...

VulnCheck KEV: CVE-2023-41724

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network...

CVE-2024-34080 MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

MantisBT Mantis Bug Tracker is an open source issue tracker. If an issue references a note that belongs to another issue that the user doesn't have access to, then it gets hyperlinked. Clicking on the link gives an access denied error as expected, yet some information remains available via the...

CVE-2024-32100

CVE-2024-32100 is an information-exposure vulnerability in the Easy Digital Downloads (EDD) WordPress plugin up to version 3.2.11. The issue allows an unauthenticated actor to access sensitive information exposed by EDD. Public sources in the connected documents confirm the vulnerability descript...

CVE-2024-32100 WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: from n/a through 3.2.11...

CVE-2024-34812

CVE-2024-34812 concerns Exposure of Sensitive Information to an Unauthorized Actor in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons. Affected product: ShopBuilder – Elementor WooCommerce Builder Addons (RadiusTheme) with versions from n/a through 2.1.8. Documented impact: informa...

CVE-2024-35165

CVE-2024-35165 is a vulnerability in Gutenify that leads to Exposure of Sensitive Information to an Unauthorized Actor. According to the provided data, Gutenify versions up to 1.4.0 are affected, with the issue enabling information exposure via an API or similar surface. The description indicates...

CVE-2024-35165 WordPress Gutenify plugin <= 1.4.0 - Sensitive Data Exposure via API vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gutenify.This issue affects Gutenify: from n/a through 1.4.0...

CVE-2024-35171 WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25...

CVE-2024-34549

CVE-2024-34549: Exposure of Sensitive Information to an Unauthorized Actor in Automattic WP Job Manager (affecting WP Job Manager up to version 2.2.2). The connected Red Hat and Wordfence entries confirm the issue is an Information Exposure vulnerability, exploitable by unauthenticated actors, wi...

CVE-2024-34549 WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.2.2...

CVE-2024-34556

CVE-2024-34556 affects UkrSolution Barcode Scanner with Inventory & Order Manager. The connected Wordfence entry documents an unauthenticated information exposure vulnerability affecting the Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.4. The CVE entry links to a vulnerabi...

APT trends report Q1 2024

For more than six years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. These summaries are based on our threat intelligence research. They provide a representative snapshot of what we have published and...

PT-2024-25963 · Automattic · Wp Job Manager

Name of the Vulnerable Software and Affected Versions: WP Job Manager versions prior to 2.2.3 is not mentioned, however, the issue affects WP Job Manager from n/a through 2.2.2, so WP Job Manager versions through 2.2.2 Description: The issue is related to Exposure of Sensitive Information to an...

CVE-2024-34368

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This issue affects Mooberry Book Manager: from n/a through 4.15.12...

CVE-2024-34388

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects GDPR Compliance: from n/a through 1.2.5...

CVE-2024-34382

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in RoboSoft Robo Gallery.This issue affects Robo Gallery: from n/a through 3.2.18...

CVE-2024-34368 WordPress Mooberry Book Manager plugin <= 4.15.12 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This issue affects Mooberry Book Manager: from n/a through 4.15.12...

CVE-2024-34368

CVE-2024-34368: Exposure of Sensitive Information to an Unauthorized Actor in Mooberry Book Manager. Affected: Mooberry Book Manager

CVE-2024-34382

CVE-2024-34382 : Robo Gallery (RoboSoft Robo Gallery) is affected by an unauthenticated information exposure up to version 3.2.18. The vulnerability is confirmed in connected documents and has been patched; upgrade to a version newer than 3.2.18 to mitigate.