CVE-2024-2730

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available...

PT-2024-2850 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could allow an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScri...

PT-2024-21233 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue is related to insufficient encoding of user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited through the /amssplus/admin/index.php endpoint...

PT-2024-6391 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.2.1 Description: The issue is related to a Use-After-Free UAF vulnerability in the dasher configure pid function. This vulnerability can be exploited by a remote attacker to cause a denial of service. The dasher configure pid...

PT-2024-13549 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the angel coffee mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: Fo...

PT-2024-15232 · Unknown · Uniway Router

Name of the Vulnerable Software and Affected Versions: Uniway Router versions up to 2.0 Description: A critical issue affects some unknown functionality of the file /boaform/device reset.cgi of the component Device Reset Handler, leading to denial of service. The attack may be launched remotely...

CVE-2023-47619

CVE-2023-47619 affects Audiobookshelf up to v2.4.3. The vulnerability allows users with the update permission to read arbitrary files, delete arbitrary files, and make GET requests to arbitrary URLs and read the responses, leading to Information Disclosure. There are no patches listed in the prov...

PT-2023-32514 · Unknown · Maiwei Safety Production Control Platform

Name of the Vulnerable Software and Affected Versions: Maiwei Safety Production Control Platform version 4.1 Description: A problematic issue was found in the Maiwei Safety Production Control Platform, affecting the /api/DataDictionary/GetItemList API endpoint. This issue leads to information...

PT-2023-32275 · Viessmann · Viessmann Vitogate 300

Name of the Vulnerable Software and Affected Versions: Viessmann Vitogate 300 versions up to 2.1.3.0 Description: A vulnerability was found in the Viessmann Vitogate 300, affecting some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been...

PT-2023-6372 · Advantech · Advantech Webaccess

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess version 9.1.3 Description: The issue is related to an exposure of sensitive information to an unauthorized actor, which could lead to the leakage of user credentials. This is due to a lack of protection for service data...

PT-2023-6394 · F5 · Big-Ip Local Traffic Manager +5

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions prior to the fixed version Description: The issue is related to insecure privilege management in BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System...

PT-2023-26798 · Unknown · Ziparchive

Name of the Vulnerable Software and Affected Versions: ZipArchive version 2.5.4 Description: The issue is related to an unhandled edge case in the sanitizedPath component of ZipArchive, which allows attackers to cause a Denial of Service DoS by using a crafted zip file. Recommendations: For...

PT-2023-27034

Name of the Vulnerable Software and Affected Versions AOMedia versions 3.0.0 through 3.5.0 Description The issue is related to an invalid read memory access via the component assign frame buffer p in av1/common/av1 common int.h. This component is part of the AOMedia library. Recommendations For...

PT-2023-27113 · Icms · Icms

Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.16 Description: The issue is related to a SQL injection vulnerability. It affects the bakupdata function, allowing for potential SQL injection attacks. Recommendations: For iCMS version 7.0.16, consider disabling the bakupdat...

PT-2023-25799 · Microsoft · Chakracore

Name of the Vulnerable Software and Affected Versions: ChakraCore version cbb9b Description: A stack overflow issue was discovered in ChakraCore via the Js::ScopeSlots::IsDebuggerScopeSlotArray function. Recommendations: For ChakraCore version cbb9b, as a temporary workaround, consider disabling...

CVE-2023-34452 Grav vulnerable to Self Cross Site Scripting in /forgot_password

Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgotpassword" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. While this vulnerability can potentially allow an...

PT-2023-22375 · Google · Android

Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app for Android versions 7.0 through 8.0 Description: The issue allows unauthorized applications to inject data into the database that stores user personal preferences, which can be loaded into memory and used when t...

PT-2023-21929 · Unknown · Twister Antivirus

Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8 Description: A problematic issue has been found in the function 0x804f2158/0x804f2154/0x804f2150/0x804f215c/0x804f2160/0x80800040/0x804f214c/0x804f2148/0x804f2144/0x801120e4/0x804f213c/0x804f2140 in the library...

PT-2023-20854 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. The vendor states that this is an expected abort on out-of-memory error. Recommendation...

PT-2023-21583 · Avalanche · Avalanche

Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An authentication bypass issue exists that could allow an attacker to gain access by exploiting the SetUser method or by exploiting a Race Condition in the authentication message. Recommendation...