PT-2024-14099 · Brainstorm Force · Projecthuddle Client Site

Name of the Vulnerable Software and Affected Versions: ProjectHuddle Client Site versions 1.0.34 and earlier Description: The issue is related to a Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site. Recommendations: For versions 1.0.34 and earlier, update to a...

PT-2024-14100 · Wpeverest · Everest Forms

Name of the Vulnerable Software and Affected Versions: Everest Forms versions 2.0.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPEverest Everest Forms. Recommendations: For versions 2.0.3 and earlier, update to a version later than 2.0.3 to resolve t...

PT-2024-19923 · Unknown · Happyforms

Name of the Vulnerable Software and Affected Versions: Happyforms versions 1.25.10 and earlier Description: The issue is related to a Missing Authorization vulnerability in Happyforms. Recommendations: For versions 1.25.10 and earlier, update to a version later than 1.25.10 to resolve the issue...

PT-2024-23444 · Unknown · Sliced Invoices

Name of the Vulnerable Software and Affected Versions: Sliced Invoices versions 3.9.2 and earlier Description: A Missing Authorization issue affects Sliced Invoices, allowing unauthorized access. The estimated number of potentially affected devices worldwide is not specified. There is no...

PT-2024-23394 · Pagelayer · Pagelayer

Name of the Vulnerable Software and Affected Versions: PageLayer versions 1.8.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Pagelayer Team PageLayer. This vulnerability may allow unauthorized access. Recommendations: For versions 1.8.1 and earlier,...

PT-2024-25332 · 8Theme · 8Theme Xstore

Name of the Vulnerable Software and Affected Versions: 8theme XStore versions 9.3.8 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects 8theme XStore, allowing unauthorized access. The estimated number of potentially affected devices...

PT-2024-24872 · Merv Barrett · Easy Property Listings

Name of the Vulnerable Software and Affected Versions: Easy Property Listings versions 3.5.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Merv Barrett Easy Property Listings. Recommendations: For versions 3.5.3 and earlier, update to a version later th...

PT-2024-23440 · Weforms · Weforms

Name of the Vulnerable Software and Affected Versions: weForms versions 1.6.20 and earlier Description: A Missing Authorization issue has been identified. This issue allows unauthorized access. The estimated number of potentially affected devices is not specified. Recommendations: For weForms...

RHEL 6 : kdepim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kmail: Send Later with Delay bypasses OpenPGP CVE-2017-9604 - KDE KMail does not encrypt attachments in...

UBUNTU-CVE-2021-47456

In the Linux kernel, the following vulnerability has been resolved: can: peakpci: peakpciremove: fix UAF When remove the module peekpci, referencing 'chan' again after releasing 'dev' will cause UAF. Fix this by releasing 'dev' later. The following log reveals it: 35.961814 BUG: KASAN:...

SUSE CVE-2024-35195

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verif...

PT-2024-26356 · Flothemes · Flo Forms

Name of the Vulnerable Software and Affected Versions: Flo Forms versions 1.0.42 and earlier Description: The issue is related to a Missing Authorization vulnerability in Flothemes Flo Forms. Recommendations: For versions 1.0.42 and earlier, update to a version later than 1.0.42 to resolve the...

PT-2024-33160 · WordPress · Wordpress Rss Aggregator

Name of the Vulnerable Software and Affected Versions: WordPress RSS Aggregator versions prior to 4.23.9 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. This vulnerability is caused by the lack of sanitization of the notice id GET parameter. Recommendations: For...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS. An attacker could exploit this vulnerability to read...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could exploit this vulnerability to obtain...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could exploit this vulnerability to bypass...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could use this vulnerability to access note...

D-Link DHP Device Detection Consolidation

Consolidation of D-Link DHP devices detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

CVE-2024-4568

In Xpdf 4.05 and earlier, a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow...

PT-2024-25567 · Unknown · Kailey Lampert Mini Loops

Name of the Vulnerable Software and Affected Versions: Kailey Lampert Mini Loops versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...