CVE-2024-35166

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3...

PT-2024-5184 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0.2, 23.0.5 and earlier Description: The issue is related to a heap-based buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code using a specially crafted file. Exploitation of thi...

PT-2024-3804 · Cacti +3 · Cacti +3

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.27 Description: The issue is related to the form save function in Cacti, which lacks proper validation of XML object sequences, allowing a remote attacker to execute arbitrary SQL queries. This is due to some data...

CVE-2024-33947

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic allows Reflected XSS.This issue affects RegistrationMagic: from n/a through 5.3.2.0...

PT-2024-24538 · WordPress · Convertplug

Name of the Vulnerable Software and Affected Versions: ConvertPlug plugin for WordPress versions up to, and including, 3.5.25 Description: The issue is related to a missing capability check on the cp dismiss notice function, allowing authenticated attackers with subscriber-level access and above ...

ARM Mali GPU Driver 资源管理错误漏洞

ARM Mali GPU Driver is a driver from ARM UK for Mali GPU support. A security vulnerability exists in ARM Mali GPU Driver versions r41p0 through r47p0, which stems from a post-release reuse vulnerability in the kernel driver that allows an attacker to perform incorrect GPU memory handling operatio...

mysql: Client programs unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are 5.7.41 and prior and 8.0.32 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2024-25178 · Hero · Hfheropayment

Name of the Vulnerable Software and Affected Versions: Hero hfheropayment versions 1.2.5 and earlier Description: The issue allows an attacker to escalate privileges via the HfHeropaymentGatewayBackModuleFrontController::initContent function. This is a SQL Injection vulnerability. Recommendations...

PT-2024-25186 · Unknown · Webbax Supernewsletter

Name of the Vulnerable Software and Affected Versions: Webbax supernewsletter versions 1.4.21 and earlier Description: The issue allows a remote attacker to escalate privileges via the Super Newsletter module in the product search.php component. Recommendations: For versions 1.4.21 and earlier,...

PT-2024-25467 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: A stack-buffer-underflow issue was discovered in lunasvg at lunasvg/source/layoutcontext.cpp. Recommendations: For lunasvg version 2.3.9, at the moment, there is no information about a newer version that...

PT-2024-25360 · Unknown · Tips/Tricks Hq Easy Accept Payments

Name of the Vulnerable Software and Affected Versions: Tips and Tricks HQ Easy Accept Payments versions 4.9.10 and earlier Description: The issue is related to a Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments. Recommendations: For versions 4.9.10 and earlier, updat...

PT-2024-25392 · Piotnet · Piotnet Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Piotnet Addons For Elementor Pro versions through 7.1.17 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions through 7.1.1...

PT-2024-25175 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: A segmentation violation was discovered in Jerryscript via the parser parse class component at jerry-core/parser/js/js-parser-expr.c. Recommendations: For Jerryscript version cefd391, consider...

PT-2024-25439 · WordPress · Wp Republic Hide Dashboard Notifications

Name of the Vulnerable Software and Affected Versions: WP Republic Hide Dashboard Notifications versions 1.2.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects WP Republic Hide Dashboard Notifications. This allows an attacker to perform unintended actions on a user's...

PT-2024-25173 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: A segmentation violation was discovered in Jerryscript via the component scanner seek at jerry-core/parser/js/js-scanner-util.c. Recommendations: For Jerryscript version cefd391, consider avoiding the...

PT-2024-24854 · Hasthemes · Ht Mega

Name of the Vulnerable Software and Affected Versions: HasThemes HT Mega versions n/a through 2.4.7 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have acce...

PT-2024-24764 · Unknown · Shared Files

Name of the Vulnerable Software and Affected Versions: Shared Files versions 1.7.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in Shared Files PRO Shared Files. Recommendations: For versions 1.7.16 and earlier, update to a version that includes the fix...

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vulnerability

Elber Signum DVB-S/S2 IRD for Radio Networks version 1.999 suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality. The issue allows attackers to bypass authentication by manipulating the setpwd endpoint that enables th...

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Insecure Direct Object Reference Vulnerability

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it...

PT-2024-24452 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CMSeasy version 7.7.7.9 Description: The issue allows for code execution. Recommendations: For CMSeasy version 7.7.7.9, at the moment, there is no information about a newer version that contains a fix for this issue...