PT-2024-19952 · Apache · Apache Kylin

Name of the Vulnerable Software and Affected Versions: Apache Kylin versions 2.0.0 through 4.x Description: The issue is a Session Fixation vulnerability in Apache Kylin. This vulnerability affects the web interface and can lead to session fixation, allowing for remote attacks and unauthorized...

PT-2024-35735 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: A heap-buffer-overflow issue was discovered in the SkipSpacesAndLineEnd function. This occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application cras...

CBL Mariner 2.0 Security Update: apr (CVE-2023-49582)

The version of April installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49582 advisory. - Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read...

Information Exposure

Overview taegis-magic is a Taegis IPython Magics Affected versions of this package are vulnerable to Information Exposure due to the exposure of inspect.currentframe.flocals in the search function in events.py, which exposes a GraphQLService object. This may include sensitive internal values such...

PT-2024-27592 · Post Grid · Post Grid

Name of the Vulnerable Software and Affected Versions: Post Grid versions through 7.7.4 Description: The issue is related to a Missing Authorization vulnerability in Post Grid, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

PT-2024-28874 · Unknown · Sourcebans++

Name of the Vulnerable Software and Affected Versions: Sourcebans++ versions prior to 1.8.0 Description: The issue allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. This occurs in Sourcebans++ when the attacker uses a crafted XAJAX...

PT-2024-30477 · Woocommerce · Ukrsolution Print Barcode Labels For Your Woocommerce

Name of the Vulnerable Software and Affected Versions: UkrSolution Print Barcode Labels for your WooCommerce versions 3.4.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This...

PT-2024-28225 · Mediaron Llc · Custom Query Blocks

Name of the Vulnerable Software and Affected Versions: MediaRon LLC Custom Query Blocks versions 5.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 5.2.0...

PT-2024-27293 · Unknown · Envira Photo Gallery

Name of the Vulnerable Software and Affected Versions: Envira Photo Gallery versions 1.8.7.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery, which allows exploiting incorrectly configured access control security...

PT-2024-27301 · Unknown · Wishlist Member

Name of the Vulnerable Software and Affected Versions: WishList Member X versions 3.26.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions 3.26.6...

Important: qt5-qtgraphicaleffects

Issue Overview: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted signal has not ye...

PT-2024-27377 · Unknown · User Rights Access Manager

Name of the Vulnerable Software and Affected Versions: User Rights Access Manager versions 1.1.2 and earlier Description: The issue is related to an Access Control vulnerability in the User Rights Access Manager. This vulnerability allows unauthorized access. Recommendations: For versions 1.1.2 a...

PT-2024-27412 · Unknown · Advanced Custom Fields Pro

Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields PRO versions through 6.3.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2024-27389 · Optinly · Optinly

Name of the Vulnerable Software and Affected Versions: Optinly versions 1.0.18 and earlier Description: The issue is related to a Missing Authorization vulnerability in OptinlyHQ Optinly, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2025-23519 · Hewlett Packard · Hpe Storeonce

Name of the Vulnerable Software and Affected Versions: HPE StoreOnce versions prior to 4.3.11 Description: The issue is related to an authentication bypass vulnerability in HPE StoreOnce, which could allow a remote attacker to bypass security restrictions. This vulnerability may be chained with...

Amazon Linux AMI : kernel (ALAS-2024-1951)

The version of kernel installed on the remote host is prior to 4.14.350-188.564. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1951 advisory. A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function...

Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

Fortinet has updated their security advisory addressing a critical FortiManager vulnerability CVE-2024-47575 to include additional workarounds and indicators of compromise IOCs. A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive files or take...

PT-2024-8325

Name of the Vulnerable Software and Affected Versions Eclipse Mosquitto versions 1.3.2 through 2.0.18 Description The issue is related to a buffer overflow in dynamic memory. If a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of boun...

PT-2024-9416 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: Ollama versions prior to 0.1.34 Description: The issue is related to an uncontrolled consumption of resources in Ollama. It is caused by the CreateModelHandler function using os.Open to read a file until completion, where the req.Path paramet...

PT-2024-16367 · Sourcecodester · Sourcecodester Airport Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Airport Booking Management System version 1.0 Description: A critical issue was found in the function details of the component Passport Number Handler, leading to buffer overflow. The attack needs to be approached locally. The...