Intel® Processor Diagnostic Tool Advisory

Summary: A potential security vulnerability in some Intel® Processor Diagnostic Tool software may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21831 Description: Uncontrolled search path in some Intel®...

PT-2024-25521 · Linqi · Linqi

Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in linqi, where there is a potential XSS vulnerability in the "/api/DocumentTemplate/GUID" API endpoint. Recommendations: For versions prior to 1.4.0.1, update to version...

Intel® Advisor Software Advisory

Summary: A potential security vulnerability in some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21772 Description: Uncontrolled search path in some Intel® Advisor...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board onboard video driver software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42668 Description: Incorrect default...

PT-2024-24023 · J.N. Breetvelt A.K.A. Opajaap · Wp Photo Album Plus

Name of the Vulnerable Software and Affected Versions: WP Photo Album Plus versions through 8.7.01.001 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus. Recommendations: For versions through...

PT-2024-26208 · Radiustheme · Radiustheme Shopbuilder – Elementor Woocommerce Builder Addons

Name of the Vulnerable Software and Affected Versions: RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons versions prior to 2.1.9 Description: The issue is related to Exposure of Sensitive Information to an Unauthorized Actor. There is no information provided about the estimated numbe...

PT-2024-22615 · Gocd · Gocd

Name of the Vulnerable Software and Affected Versions: GoCD versions 19.4.0 through 23.5.0 Description: The issue is a reflected cross-site scripting vulnerability on the loading page displayed while GoCD is starting, via abuse of a redirect to query parameter with inadequate validation. Attacker...

PT-2024-25254 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to v1.0.0-B20231213.1013 Description: The issue allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the "Wireless Page" API endpoint. This enables the attacker to perform...

Important: php8.1

Issue Overview: The vulnerability allows a remote attacker to bypass implemented security restrictions. The vulnerability exists due to the way PHP handles HTTP variable names. A remote attacker can set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cook...

PT-2024-24219 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: A hardcoded password for the root user was found in the /etc/shadow.sample file. Recommendations: For TOTOLINK EX200 version 4.0.3c.7646 B20201211, consider changing the hardcoded...

PT-2024-26240 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 12.4 Description: The issue is related to Cross Site Scripting XSS due to the lack of sanitization of the HTTP USER AGENT variable. In the view/about.php file, the website retrieves the user agent from the headers through ...

PT-2024-26379 · Kingsoft · Wps Office

Name of the Vulnerable Software and Affected Versions: WPS Office versions prior to 17.0.0 Description: The issue arises from the application's failure to properly sanitize file names before processing them through external application interactions, leading to a form of path traversal. This...

PT-2024-21920 · WordPress · Vikbooking Hotel Booking Engine & Pms

Name of the Vulnerable Software and Affected Versions: VikBooking Hotel Booking Engine & PMS WordPress plugin versions prior to 1.6.8 Description: The access control mechanism in the VikBooking Hotel Booking Engine & PMS WordPress plugin fails to properly restrict access to its settings. This...

PT-2024-7386

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 3.3.3 Description: The issue arises from the use of low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial, leading to out-of-bounds memory reads or writes. This can cause an...

PT-2024-19606 · Crushftp · Crushftp

Name of the Vulnerable Software and Affected Versions: CrushFTP versions 10.5.5 through 10.6.0 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via a crafted payload. Recommendations: For CrushFTP versions 10.5.5 through 10.6.0, update to a version that...

PT-2024-25887 · Unknown · One Click Demo Import

Name of the Vulnerable Software and Affected Versions: One Click Demo Import versions 3.2.0 and earlier Description: The issue is related to the Deserialization of Untrusted Data, which affects the functionality of the software. Recommendations: For versions 3.2.0 and earlier, update to a version...

PT-2024-25808

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 14.1.1 Description A Server-Side Request Forgery SSRF vulnerability was identified in Next.js Server Actions. If the Host header is modified, and certain conditions are met, an attacker may be able to make requests th...

PT-2024-4531 · Cyberpower · Cyberpower Powerpanel Enterprise

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel Enterprise versions prior to 2.8.3 Description: A sql injection vulnerability exists in the software, allowing an unauthenticated remote attacker to leak sensitive information via the query utask verbose function within...

PT-2024-14852

Name of the Vulnerable Software and Affected Versions Save as PDF Plugin by Pdfcrowd WordPress plugin versions prior to 3.2.0 Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability ...

PT-2024-3338 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.201 Description: The issue is a use-after-free vulnerability in the Visuals component of Google Chrome, allowing a remote attacker who has compromised the renderer process to potentially perform a...