PT-2024-8848 · Unknown · Rendertune

Name of the Vulnerable Software and Affected Versions: RenderTune version 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs due to inadequate protection of the web page structure when handling the Upload Title parameter. This allows a remote attacker t...

PT-2024-18423 · Unknown · Osuuu Lightpicture

Name of the Vulnerable Software and Affected Versions: osuuu LightPicture versions up to 1.2.2 Description: A critical issue was found in osuuu LightPicture, affecting an unknown function of the file /app/controller/Setup.php. This issue leads to unrestricted upload and can be exploited remotely...

PT-2024-21391 · Fullstackhero · Webapi Boilerplate

Name of the Vulnerable Software and Affected Versions: FullStackHero's WebAPI Boilerplate versions 1.0.0 through 1.0.1 Description: A host header injection issue in the forgot password function allows attackers to leak the password reset token via a crafted request. Recommendations: For versions...

PT-2024-21195 · Unknown +1 · Tinymce Advanced Professional Formats/Styles +1

Name of the Vulnerable Software and Affected Versions: TinyMCE and TinyMCE Advanced Professional Formats and Styles versions n/a through 1.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

mysql: InnoDB unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2024-14323 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.45 through 7.4.3.101 Liferay DXP 2023.Q3 before patch 6 Liferay DXP versions 7.4 update 45 through 92 Description: The issue is an open redirect vulnerability in the Countries Management’s edit region page. This...

PT-2024-2227 · Intel · Intel Xtu

Name of the Vulnerable Software and Affected Versions: IntelR XTU versions prior to 7.12.0.29 Description: The issue is related to improper access control in IntelR XTU software, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2024-2698 · Intel · Intel Optane Pmem 100 Series Management

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM PMem 100 Series Management Software versions prior to 01.00.00.3547 Description: The issue is related to improper access control in the IntelR OptaneTM PMem 100 Series Management Software, which may allow an authenticated user...

PT-2024-11971 · Rancher · Rancher

Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.6.14 Rancher versions prior to 2.7.10 Rancher versions prior to 2.8.2 Description: A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. The issue affects...

PT-2024-15501 · WordPress · The Starbox – The Author Box For Humans

Name of the Vulnerable Software and Affected Versions: The Starbox – the Author Box for Humans plugin for WordPress versions up to, and including, 3.4.7 Description: The issue is related to Insecure Direct Object Reference, which allows subscribers to view plugin preferences and potentially other...

PT-2024-13433 · Connectwise · Connectwise Screenconnect

Name of the Vulnerable Software and Affected Versions: ConnectWise ScreenConnect versions through 23.8.4 Description: The issue allows man-in-the-middle attackers to achieve remote code execution via crafted messages. Recommendations: For ConnectWise ScreenConnect versions through 23.8.4, update ...

PT-2024-14313 · Ylianst · Ylianst Meshcentral

Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: An algorithm-downgrade issue was discovered. Recommendations: For Ylianst MeshCentral version 1.1.16, at the moment, there is no information about a newer version that contains a fix for this...

PT-2024-20050 · Loom · Loom

Name of the Vulnerable Software and Affected Versions: Loom on macOS version 0.196.1 and before Description: An issue in Loom allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. The vendor disputes this issue because it requires local...

PT-2024-1366 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: The issue is related to the function formWifiWpsOOB and involves a stack-based buffer overflow due to the manipulation of the index argument. This can be exploited remotely, potentially...

PT-2024-2758 · Jenkins +1 · Jenkins Log Command Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Log Command Plugin versions 1.0.2 and earlier Description: The issue is related to the command parser feature in the Jenkins Log Command Plugin, which replaces an '@' character followed by a file path in an argument with the file's...

VulnCheck KEV: CVE-2019-2768

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI...

PT-2024-19613 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A global-buffer-overflow issue was discovered in swftools via the parseExpression function at swftools/src/swfc.c:2587. This issue can potentially lead to a denial of service. Recommendations: For swftools...

PT-2024-1235 · Oracle · Oracle Isupport

Name of the Vulnerable Software and Affected Versions: Oracle iSupport versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the Internal Operations component of Oracle iSupport, part of the Oracle E-Business Suite. This allows a remote attacker to...

PT-2024-15468 · Fireeye · Fireeye Malware Analysis

Name of the Vulnerable Software and Affected Versions: FireEye Malware Analysis AX version 9.0.3.936530 Description: The issue allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user. This is achieved by...

PT-2024-6073 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.139 Description: The issue is related to an out of bounds read in the V8 component of Google Chrome, allowing a remote attacker to potentially access confidential data by using a specially crafted HT...