CVE-2024-37048

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

PT-2024-34780 · Unknown · Gmo Social Connection

Name of the Vulnerable Software and Affected Versions: GMO Social Connection versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performi...

PT-2024-34999 · Unknown · Gutenium Blocks

Name of the Vulnerable Software and Affected Versions: Gutenium Blocks versions 1.1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

PT-2024-35184 · Unknown · Os Pricing Tables

Name of the Vulnerable Software and Affected Versions: OS Pricing Tables versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be used to inject...

PT-2024-39590 · Yotpo · Yotpo: Product & Photo Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: Yotpo: Product & Photo Reviews for WooCommerce plugin for WordPress versions up to, and including, 1.7.8 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allo...

PT-2024-20484 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The input does not specify the name of the vulnerable software or the affected versions. Description: A patch has been released for a previously existing issue. Recommendations: At the moment, there is no information about a newer version tha...

Access Control Bypass

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Access Control Bypass due to insufficient capability checks. An attacker can delete badges they are not authorized to access by exploiting these checks. Remediation Upgrade moodle/moodle to version...

PT-2024-30308 · Unknown · Typesquare Webfonts

Name of the Vulnerable Software and Affected Versions: TypeSquare Webfonts versions 2.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.0.7 and earlier,...

PT-2024-30382 · Woocommerce · Persian Woocommerce Sms

Name of the Vulnerable Software and Affected Versions: Persian WooCommerce versions 7.1.6 and earlier Description: The issue affects Persian WooCommerce due to a Missing Authorization vulnerability. This vulnerability allows accessing functionality not properly constrained by ACLs. Recommendation...

PT-2024-34244 · Unknown · Raptor Editor

Name of the Vulnerable Software and Affected Versions: Raptor Editor versions 1.0.20 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. It specifically affects the Raptor Editor, allowing for...

PT-2024-32770 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A severe issue was disclosed for the Linux Kernel. The upstream kernel version 6.6.58 fixes bugs and vulnerabilities. For more information about the vulnerabilities, additional resourc...

PT-2024-41088 · Paste · Paste

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The creator of the crate paste has stated that this project is no longer maintained and has archived the repository. Recommendations: At the moment, there is no information about a newer...

OESA-2024-2135 runc security update

runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fixes: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files...

PYSEC-2024-83

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a prediction...

PT-2024-31157 · Vernemq · Vernemq

Name of the Vulnerable Software and Affected Versions: vernemq version 2.0.1 Description: A memory allocation issue allows attackers to cause a Denial of Service DoS via excessive memory consumption. Recommendations: For vernemq version 2.0.1, at the moment, there is no information about a newer...

PT-2024-38725 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: The issue concerns Prisma Access Browser. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendation...

PT-2024-29471 · Texas Instruments · Texas Instruments Fusion Digital Power Designer

Name of the Vulnerable Software and Affected Versions: Texas Instruments Fusion Digital Power Designer version 7.10.1 Description: The issue allows a local attacker to obtain sensitive information via the plaintext storage of credentials. This is due to insufficiently protected credentials in the...

PT-2024-38466 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves an unusable ConsultID alert due to an invalid candidate number, which is not valid and should not be used. There are no associated ConsultIDs for this candidate numbe...

PT-2024-5962 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious...

PT-2024-23468 · Unknown · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support versions 6.1.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in Awesome Support Team Awesome Support. Recommendations: For versions 6.1.7 and earlier, update to a version later than 6.1...