PT-2024-35213 · Cmsminds · Cmsminds Boat Rental Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: cmsMinds Boat Rental Plugin for WordPress versions 1.0.1 and earlier Description: The issue allows malicious file uploads, posing a risk of web server compromise. This can enable an attacker to upload a web shell to a web server...

Intel DSA 安全漏洞

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, a must for i-card users. A security vulnerability exists in versions prior to Intel...

Intel® Thunderbolt™ Share Software Advisory

Summary: A potential security vulnerability in some Thunderbolt™ Share software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-34022 Description: Improper Access Control in some Thunderbolt™...

Intel® Quartus® Prime Standard Edition Software for Windows Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01193.html...

Intel® Extension for Transformers Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for Transformers software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21799 Description: Path traversal for some Intel®...

Intel® Granulate™ Software Advisory

Summary: A potential security vulnerability in some Intel® Granulate™ software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27200 Description: Improper access control in some Intel® Granulat...

PT-2024-34757 · Unknown · Aajoda Testimonials

Name of the Vulnerable Software and Affected Versions: Aajoda Testimonials versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Aajoda Testimonials...

PT-2024-10309 · Fortinet · Fortirecorder

Name of the Vulnerable Software and Affected Versions: FortiRecorder versions 7.2.0 through 7.2.1 FortiRecorder versions prior to 7.0.4 Description: The issue is related to a relative path traversal in the graphical user interface of the FortiRecorder device's firmware, which is caused by errors ...

PT-2024-26490 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A segmentation violation issue was discovered in vmir via the wasm parse block function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm parse block function, which can cause a...

PT-2024-34634 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG editor versions 4.3.0 and earlier Description: The issue is related to inconsistent parsing of the tag, which allows for cross-site scripting XSS in the Froala WYSIWYG editor. Recommendations: For versions 4.3.0 and earlier,...

CVE-2024-43223

Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 4.0.3.2...

PT-2024-30846 · Geek Code · Geek Code Lab Login As Users

Name of the Vulnerable Software and Affected Versions: Geek Code Lab Login As Users versions 1.4.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to unauthorized...

PT-2024-30437 · WordPress · Icegram Collect

Name of the Vulnerable Software and Affected Versions: Icegram Collect plugin versions 1.3.14 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For Icegram...

WordPress plugin FormCraft 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-30469 · Fonts · Fonts

Name of the Vulnerable Software and Affected Versions: Fonts versions through 3.7.7 Description: The issue is related to a Missing Authorization vulnerability in the Fonts Plugin, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2024-27540 · Automattic · Newspack Blocks

Name of the Vulnerable Software and Affected Versions: Automattic Newspack Blocks versions n/a through 3.0.8 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability allows Path Traversa...

PT-2024-34581 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into "mainfunction.cgi" and execute arbitrary commands by calling the setup cacertificate function. This enables attackers to potentially...

ABB Cylon Aspect 3.08.01 (jsonProxy.php) Unauthenticated Credentials Disclosure

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller allows an unauthenticated attacker to...

ABB Cylon Aspect 3.08.01 (jsonProxy.php) Unauthenticated Reflected XSS

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller suffers from an unauthenticated reflected...

PT-2024-33077 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: JeecgBoot version 3.7.1 Description: A SQL injection vulnerability was discovered in JeecgBoot via the component /onlDragDatasetHead/getTotalData. This issue allows for potential SQL injection attacks. The estimated number of potentially...