PT-2024-2669 · Bitdefender · Bitdefender Antivirus Plus +3

Name of the Vulnerable Software and Affected Versions: Bitdefender Total Security version 27.0.25.114 Bitdefender Internet Security version 27.0.25.114 Bitdefender Antivirus Plus version 27.0.25.114 Bitdefender Antivirus Free version 27.0.25.114 Description: A configuration setting issue in the...

PT-2024-13301 · Mesa +2 · Mesa +2

Name of the Vulnerable Software and Affected Versions: Mesa version 23.0.4 Description: A buffer over-read was discovered in the glXQueryServerString function. This issue is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controlled...

PT-2024-10424 · Cjson +3 · Cjson +3

Name of the Vulnerable Software and Affected Versions: cJSON version 1.7.17 Description: The issue is related to a segmentation violation that can be triggered through the second parameter of the cJSON SetValuestring function at cJSON.c. This can lead to a denial of service. The vulnerability is...

PT-2024-2443 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: A critical issue has been found in the setSchedWifi function of the /goform/openSchedWifi file, which can lead to a stack-based buffer overflow when the schedStartTime argument is manipulated. This...

PT-2024-22408 · Knowband · Knowband Spinwheel

Name of the Vulnerable Software and Affected Versions: KnowBand spinwheel versions 3.0.3 and earlier Description: The issue allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail method. This is a SQL...

PT-2024-13978 · Woocommerce · Husky – Products Filter For Woocommerce

Name of the Vulnerable Software and Affected Versions: HUSKY – Products Filter for WooCommerce formerly WOOF versions 1.3.4.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the HUSKY – Products Filter for WooCommerce formerly WOOF plugin. This type of issue allows an...

PT-2024-21027 · Unknown · Etoile Web Design Ultimate Reviews

Name of the Vulnerable Software and Affected Versions: Etoile Web Design Ultimate Reviews versions through 3.2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to...

PT-2024-18227 · WordPress · The Otter Blocks – Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE PRO plugin for WordPress versions up to, and including, 2.6.3 Description: The issue is related to Stored Cross-Site Scripting via a file upload form that allows SVG...

PT-2024-15503 · WordPress · The Hustle – Email Marketing

Name of the Vulnerable Software and Affected Versions: The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress versions up to, and including, 7.8.3 Description: The issue allows unauthenticated attackers to extract sensitive data, including personally identifiable...

BIT-TENSORFLOW-2022-23593 Segfault in `simplifyBroadcast` in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The simplifyBroadcast function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault hence, denial of service, if called with scalar shapes. If all shapes are scalar, then maxRank is 0, so we build an empty SmallVector...

CVE-2023-45595

A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “fileconfiguration” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx61.0.7-2...

PT-2024-13764 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to cause apps to crash through type confusion. Recommendations: For OpenHarmony versions prior to 3.2.4, update to a version newer than 3.2.4 to resolve the...

PT-2024-18665 · Session · Session

Name of the Vulnerable Software and Affected Versions: Session version 1.17.5 Description: The application is vulnerable to Local File Read via chat attachments, allowing internal application files and public files from the user's device to be obtained without the user's consent. Recommendations:...

PT-2024-21419 · Vivotek · Vivotek Network Cameras

Name of the Vulnerable Software and Affected Versions: vivotek Network Camera version v.FD8166A-VVTK-0204j Description: An issue in the vivotek Network Camera allows a remote attacker to execute arbitrary code via a crafted payload to the "upload file.cgi" component. Recommendations: For version...

PT-2024-19036 · Unknown · Atakan Au 1 Click Disable All

Name of the Vulnerable Software and Affected Versions: Atakan Au 1 click disable all versions 1.0.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited by tricking a user into performing ...

PT-2024-8848 · Unknown · Rendertune

Name of the Vulnerable Software and Affected Versions: RenderTune version 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs due to inadequate protection of the web page structure when handling the Upload Title parameter. This allows a remote attacker t...

PT-2024-2055 · Ibm · Ibm Engineering Requirements Management Doors

Name of the Vulnerable Software and Affected Versions: IBM Engineering Requirements Management DOORS version 9.7.2.7 Description: The issue is related to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the websit...

PT-2024-18423 · Unknown · Osuuu Lightpicture

Name of the Vulnerable Software and Affected Versions: osuuu LightPicture versions up to 1.2.2 Description: A critical issue was found in osuuu LightPicture, affecting an unknown function of the file /app/controller/Setup.php. This issue leads to unrestricted upload and can be exploited remotely...

PT-2024-21391 · Fullstackhero · Webapi Boilerplate

Name of the Vulnerable Software and Affected Versions: FullStackHero's WebAPI Boilerplate versions 1.0.0 through 1.0.1 Description: A host header injection issue in the forgot password function allows attackers to leak the password reset token via a crafted request. Recommendations: For versions...

PT-2024-21195 · Unknown +1 · Tinymce Advanced Professional Formats/Styles +1

Name of the Vulnerable Software and Affected Versions: TinyMCE and TinyMCE Advanced Professional Formats and Styles versions n/a through 1.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...