SUSE CVE-2024-31580

PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-24593 · Tolgee · Tolgee

Name of the Vulnerable Software and Affected Versions: Tolgee versions prior to 3.57.2 Description: Tolgee is an open-source localization platform. The issue concerns the /v2/projects/translations and /v2/projects/projectId/translations endpoints, where translation data was returned even when the...

UBUNTU-CVE-2024-3865

Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 125...

WordPress Watu Quiz plugin <= 3.4.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered by Lucio Sá in WordPress Plugin Watu Quiz versions = 3.4.1...

PT-2024-22700 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to execute arbitrary code in any apps through improper input. Recommendations: For versions prior to 3.2.4, update to a version newer than 3.2.4 to resolve the...

PT-2024-22803 · Kimai · Kimai

Name of the Vulnerable Software and Affected Versions: Kimai versions prior to 2.13.0 Description: The permission view other timesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the view other timesheet permission to true, on th...

[SECURITY] Fedora 39 Update: python3.6-3.6.15-27.fc39

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

CVE-2023-6444

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address which by default is the admin email address via an unauthenticated crafted request...

PT-2024-13263 · Ailux · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-646 issue in the "iec61850" functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. Recommendations:...

PT-2024-2744 · Siemens · Polarion Alm

Name of the Vulnerable Software and Affected Versions: Polarion ALM versions prior to V2404.0 Description: A vulnerability has been identified due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to...

Telerik JustDecompile 安全漏洞

Telerik JustDecompile is a free .NET decompiler and assembly browser from Telerik Bulgaria. A security vulnerability exists in Telerik JustDecompile versions prior to 2024 R1, which stems from an elevation of privilege vulnerability that allows a less privileged user to elevate their privileges o...

WordPress plugin Form Vibes security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-42134

PAX Android based POS devices with PayDroid8.1.0SagittariusV11.1.4520230314 or earlier can allow the signed partition overwrite and subsequently local code execution via hidden command. The attacker must have physical USB access to the device in order to exploit this vulnerability...

PT-2024-10576 · Gentoo · Gentoo Portage

Name of the Vulnerable Software and Affected Versions: Gentoo Portage versions prior to 3.0.47 Description: The issue concerns missing PGP validation of executed code. Specifically, the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. This issue doe...

WordPress Plugin LightStart Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-18992

Name of the Vulnerable Software and Affected Versions D-Tale versions prior to 3.9.0 Description D-Tale is a visualizer for Pandas data structures. Users hosting versions prior to 3.9.0 publicly can be vulnerable to server-side request forgery SSRF, allowing attackers to access files on the serve...

PT-2023-31797 · Zerobounce · Zerobounce Email Verification & Validation

Name of the Vulnerable Software and Affected Versions: ZeroBounce Email Verification & Validation versions 1.0.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This can b...

[SECURITY] Fedora 38 Update: python3.6-3.6.15-22.fc38

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 39 Update: python3.7-3.7.17-4.fc39

Python 3.7 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.7, see other distributions that support it, such as an older Fedora release...

[SECURITY] Fedora 39 Update: python3.8-3.8.18-3.fc39

Python 3.8 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.8, see other distributions that support it, such as an older Fedora release...