Apache Tomcat 9.0.0.M1 < 9.0.98 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 9.0.98. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.98security-9 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat...

PT-2025-11227

Name of the Vulnerable Software and Affected Versions: libxslt versions prior to 1.1.43 Description: The issue is related to a use-after-free error in the numbers.c file of libxslt. This occurs during nested XPath evaluations, where an XPath context node can be modified but never restored. The...

CVE-2024-35230

CVE-2024-35230 affects GeoServer (Java) where the welcome and about pages disclose version and revision information of the server and components. This information exposure can aid fingerprinting of the running software. The issue has been patched in version 2.26.0; users should upgrade to 2.26.0 ...

PT-2025-2776

Name of the Vulnerable Software and Affected Versions: OFFIS DCMTK version 3.6.8 Description: An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a maliciou...

PT-2024-36397

Name of the Vulnerable Software and Affected Versions Dante versions 1.4.0 through 1.4.3 Description The issue is related to incorrect access control for some sockd.conf configurations involving the socksmethod. This problem affects certain settings and can lead to unauthorized access...

PT-2024-17702 · Iobit · Iobit Advanced Systemcare Ultimate +1

Name of the Vulnerable Software and Affected Versions: IObit Advanced SystemCare Ultimate versions up to 17.0.0 Description: A vulnerability was found in the function 0x8001E024 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference...

PT-2024-16023 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue affects Telerik UI for WPF and can be exploited, allowing for code...

PT-2025-7896

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description An out-of-bounds write flaw was found in the function GetBarrierDevice, which searches for the pointer device based on its device ID. If no matching device ID is found, the code...

PT-2024-35723

Name of the Vulnerable Software and Affected Versions The Events Calendar WordPress plugin versions prior to 6.8.2.1 Description The issue is related to missing access checks in the REST API, allowing unauthenticated users to access information about password-protected events. Recommendations For...

Apache Struts 2.0.0 <=> 2.3.37(EOL) / 2.5.0 <=> 2.5.33 / 6.0.0 <=> 6.3.0.2 Remote Code Execution (S2-067)

The version of Apache Struts installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the S2-067 advisory. - File upload logic is flawed vulnerability in Apache Struts. This issue affects Apache Struts: from 2.0.0 before 6.4.0. Users...

PT-2024-38521 · Percona +1 · Percona-Toolkit +1

Name of the Vulnerable Software and Affected Versions: percona-toolkit version 3.6.0 Description: The issue affects percona-toolkit, allowing encryption brute forcing due to the use of a password hash with insufficient computational effort. This enables an attacker to potentially crack passwords...

PT-2025-6723

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.12.10 and earlier, 2.13.x versions prior to 2.13.6 Description The issue is related to a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document...

PT-2024-35112 · Real Time Innovations · Rti Connext Professional

Name of the Vulnerable Software and Affected Versions: RTI Connext Professional versions 5.0.0 through 5.3.1.45 RTI Connext Professional versions 6.0.0 through 6.0.1.40 RTI Connext Professional versions 6.1.0 through 6.1.2.21 RTI Connext Professional versions 7.0.0 through 7.3.0.5 RTI Connext...

PT-2024-36206 · WordPress · Wpexpertsio New User Approve

Name of the Vulnerable Software and Affected Versions: WPExpertsio New User Approve versions 2.6.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WPExpertsi...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49952)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49952 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: prevent...

PT-2024-12959 · Analytify · Analytify

Name of the Vulnerable Software and Affected Versions: Analytify versions 5.1.0 and earlier Description: The issue is related to missing authorization in Analytify, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions 5.1.0 and earlier,...

PT-2024-36152 · Unknown · Wpcargo Track & Trace

Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions 7.0.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPCargo Track & Trace, which allows exploitation of incorrectly configured access control security levels...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50180)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50180 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow...

Mozilla Thunderbird ESR Security Update (MFSA2024-69) - Windows

Mozilla Thunderbird ESR is prone to an insufficient validation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-53677

A flaw was found in Apache Struts. Affected versions of this package are vulnerable to remote code execution RCE via manipulation of the file upload mechanism that enables path traversal. Under certain conditions, uploading a malicious file is possible and may then be executed on the server...