PT-2024-14024 · Ibm · Ibm Business Automation Workflow

Name of the Vulnerable Software and Affected Versions: IBM Business Automation Workflow versions 22.0.2 through 23.0.2 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...

PT-2024-17346 · South River · South River Webdrive

Name of the Vulnerable Software and Affected Versions: South River WebDrive version 18.00.5057 Description: A vulnerability was found in the New Secure WebDAV component, which can lead to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the...

PT-2024-17307 · Munsoft · Munsoft Easy Outlook Express Recovery

Name of the Vulnerable Software and Affected Versions: Munsoft Easy Outlook Express Recovery version 2.0 Description: A problematic issue has been found in the Registration Key Handler component, leading to denial of service. Local access is required to exploit this issue. The exploit has been...

PT-2024-17381 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 6.0.3 Description: A critical vulnerability was found in the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to...

PT-2024-17361 · Itop Vpn · Itop Vpn

Name of the Vulnerable Software and Affected Versions: iTop VPN versions up to 4.0.0.1 Description: A critical vulnerability was found in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler, affecting an unknown functionality. The manipulation leads to denial of service. The...

PT-2024-1440 · Kaspersky · Kaspersky Security 8.0 For Linux Mail Server

Name of the Vulnerable Software and Affected Versions: Kaspersky Security 8.0 for Linux Mail Server Description: The issue allows an attacker to potentially force an administrator to click on a malicious link to perform unauthorized actions. This is due to the lack of measures to neutralize speci...

PT-2024-14174 · WordPress · Wp Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Booking Calendar versions prior to 9.7.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2024-20261 · Unknown · Springboot-Manager

Name of the Vulnerable Software and Affected Versions: springboot-manager version 1.6 Description: The issue is related to Cross Site Scripting XSS via the "/sys/role" API endpoint. This means an attacker could potentially inject malicious scripts into the webpage, affecting users who access the...

PT-2024-20677 · Unknown · Travel Journal Using Php/Mysql With Source Code

Name of the Vulnerable Software and Affected Versions: Travel Journal Using PHP and MySQL with Source Code version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Share Your Moments paramete...

PT-2024-19589 · Livewire · Livewire

Name of the Vulnerable Software and Affected Versions: livewire versions prior to 3.0.4 Description: A Cross-Site Request Forgery CSRF issue allows remote attackers to execute arbitrary code via the getCsrfToken function. The vendor disputes this, stating that the 5d88731 commit fixes a usability...

PT-2024-13904 · Ibm · Ibm Powersc

Name of the Vulnerable Software and Affected Versions: IBM PowerSC versions 1.3 through 2.1 Description: The issue is related to the use of insecure HTTP methods, which could allow a remote attacker to perform unauthorized file request modification. Recommendations: For versions 1.3 through 2.1,...

xorg-x11-server: heap buffer overflow in DisableDevice

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments...

xorg-x11-server: heap buffer overflow in DisableDevice

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

xorg-x11-server: heap buffer overflow in DisableDevice

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments...

PT-2024-16192 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A problematic issue has been found, affecting the function agent of the file /application/index/controller/Datament.php. The manipulation of the api argument leads to information disclosure. This issue...

PT-2024-1521 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.12-rc2 through 6.8-rc1 Description: The issue is related to a Use After Free vulnerability in the Linux kernel's bluetooth module, specifically in the net/bluetooth/af bluetooth.c driver. This vulnerability can be...

PT-2024-19403

Name of the Vulnerable Software and Affected Versions ClickHouse versions prior to 24.0.2.54535 ClickHouse version 23.1 Description A bug exists in ClickHouse that allows query caching to bypass role-based access controls and policies. This means that attackers with control of a role could guess...

PT-2024-16176 · Unknown · Codeastro Expense Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Expense Management System version 1.0 Description: A vulnerability was found in the CodeAstro Expense Management System, affecting the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the ite...

PT-2024-14070 · Unknown · Ros2 Foxy Fitzroy

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy versions 2 Description: Insecure deserialization in ROS2 allows attackers to execute arbitrary code via a crafted input. The issue affects ROS2 Foxy Fitzroy with ROS VERSION=2 and ROS PYTHON VERSION=3. Recommendations: For...