PT-2024-11606 · WordPress +1 · Form Vibes

Name of the Vulnerable Software and Affected Versions: Plugin affected versions not specified Description: The issue arises from the plugin's failure to filter the delete entries parameter from user requests, leading to an SQL Injection vulnerability. There is no information provided about the...

PT-2024-14402 · Unknown · Nearby Module

Name of the Vulnerable Software and Affected Versions: nearby module affected versions not specified Description: The nearby module has a privilege escalation issue. Successful exploitation of this issue may affect availability. Recommendations: At the moment, there is no information about a newe...

PT-2024-18990 · Unknown · Chromium Embedded Framework

Name of the Vulnerable Software and Affected Versions: Chromium Embedded Framework CEF affected versions not specified Description: The issue arises from the CefVideoConsumerOSR::OnFrameCaptured function not properly checking the pixel format, leading to an out-of-bounds read outside of the...

PT-2024-13718 · Hongdian · H8951-4G-Esp +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue concerns the visibility of the tokenKey value used in user authorization within the HTML source of the login page. This could potentially expose sensitive information...

PT-2024-5109 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to an Arbitrary File Deletion and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability is associate...

PT-2024-1842 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! affected versions not specified Description: The issue is related to inadequate protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. Inadequate input validation for media...

PT-2024-1185 · Bosch · Bosch Nexo Cordless Nutrunner +2

Name of the Vulnerable Software and Affected Versions: Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner affected versions not specified Description: The issue is related to a buffer overflow in the stack of the NEXO-OS operating system. It allows an unauthenticated remote...

PT-2024-14935 · Google · Google Nest Wifi Pro

Name of the Vulnerable Software and Affected Versions: Google Nest WiFi Pro affected versions not specified Description: A severe issue has been disclosed for Google Nest WiFi Pro, allowing for root code-execution and user-data compromise. The estimated number of potentially affected devices...

PT-2023-32824 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a type confusion vulnerability. Successful exploitation of this vulnerability could cause a denial of service. Recommendations: At the moment, there is no...

PT-2023-18939 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue concerns a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. Recommendations: At the moment...

PT-2023-35665 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash occurs in the Flow::dissectMDNS function, which is called by...

CVE-2023-47118

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

PT-2023-31848 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-8293 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions affected versions not specified Description: The issue is related to insufficient exception handling in the WLAvalancheService of the Ivanti Avalanche mobile device management system. An attacker can exploit this by...

PT-2023-8056 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to errors in processing input data in the icmpping function of the Zabbix monitoring system. This can allow a remote attacker to execute arbitrary code. An attacker with...

PT-2023-35650 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. Technical details about the crash include the functions isvcd start of pic, isvcd parse decod...

PT-2023-32698 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in kubeflow/kubeflow. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2023-32699 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which are then executed by the user's browser. No...

PT-2023-26618 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a vulnerability, but details are not provided. A tool is mentioned as being easy to use, and it creates something, but the specifics are not given. There is...

PT-2023-29751 · Floorsight · Floorsight Customer Portal Q3 2023

Name of the Vulnerable Software and Affected Versions: Floorsight Customer Portal Q3 2023 Description: An indirect Object Reference IDOR in the Order and Invoice pages allows an unauthenticated remote attacker to view sensitive customer information. Recommendations: As a temporary workaround,...