PT-2024-6381

Name of the Vulnerable Software and Affected Versions REXML gem versions prior to 3.3.3 Description The REXML gem has some DoS vulnerabilities when it parses an XML that has many specific characters, such as whitespace characters, and , or . This vulnerability is related to uncontrolled resource...

PT-2024-20009 · Parisneo · Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui version latest Description: A remote code execution issue exists due to insufficient path sanitization in the reinstall binding functionality. This allows an attacker to exploit path traversal and navigate to arbitrary...

PT-2024-28041 · Unknown · Imartinez/Privategpt

Name of the Vulnerable Software and Affected Versions: imartinez/privategpt affected versions not specified Description: A stored Cross-Site Scripting XSS issue exists due to improper validation of file uploads. Attackers can exploit this by uploading malicious HTML files containing JavaScript...

PT-2024-7270 · Ruby +10 · Rexml +10

Name of the Vulnerable Software and Affected Versions: REXML versions prior to 3.2.6 REXML versions prior to 3.3.1 REXML versions prior to 3.3.2 REXML versions prior to 3.3.3 Description: The REXML gem has a denial of service vulnerability when it parses an XML that has many s in an attribute...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following Adobe Security Bulletins and apply necessary...

PT-2024-4135 · Qlik · Qlik Sense Enterprise For Windows

Name of the Vulnerable Software and Affected Versions: Qlik Sense Enterprise for Windows versions 14.67.7 through 14.187.3 Description: The issue is related to improper validation, allowing a remote attacker to elevate their privilege and execute commands on the server. This can lead to remote co...

PT-2024-27599 · WordPress · Sp Project & Document Manager

Name of the Vulnerable Software and Affected Versions: The SP Project & Document Manager WordPress plugin versions 4.71 and earlier Description: The issue allows a logged-in user to view and download files belonging to another user due to a lack of proper access controllers. Recommendations: For...

PT-2024-24104 · Aruba · Aruba Instantos/Arubaos

Name of the Vulnerable Software and Affected Versions: Aruba InstantOS/ArubaOS versions prior to 10.5.1.0 Description: The issue is related to command injection vulnerabilities in the Soft AP Daemon service, which can lead to unauthenticated remote code execution. This is achieved by sending...

PT-2024-18458 · Scrapy +3 · Scrapy +3

Name of the Vulnerable Software and Affected Versions: Scrapy versions prior to 2.11.2 Description: An issue was identified in Scrapy where the Authorization header is not removed during redirects that only change the scheme e.g., HTTPS to HTTP but remain within the same domain. This behavior...

PT-2024-12025 · Sourcecodester · Sourcecodester Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Customer Relationship Management System version 1.0 Description: The issue allows an attacker to execute arbitrary code. This can be achieved via the company or query parameters in a Cross Site Scripting vulnerability, o...

PT-2024-21372 · B&R Industrial Automation · Vc4 +6

Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Scene Viewer versions prior to 4.4.0 B&R Industrial Automation Automation Runtime versions prior to J4.93 B&R Industrial Automation mapp Vision versions prior to 5.26.1 B&R Industrial Automation mapp View versions...

PT-2024-3649 · Siemens · Jt2Go +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V2312.0001 Teamcenter Visualization V14.1 versions prior to V14.1.0.13 Teamcenter Visualization V14.2 versions prior to V14.2.0.10 Teamcenter Visualization V14.3 versions prior to V14.3.0.7 Teamcenter Visualization V23...

PT-2024-5857 · Openvpn +7 · Openvpn +7

Name of the Vulnerable Software and Affected Versions: OpenVPN versions prior to 2.6.11 Description: The issue is related to the lack of proper sanitization of PUSH REPLY messages, which can be exploited by attackers to inject unexpected arbitrary data into third-party executables or plug-ins. Th...

PT-2024-3567

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4 Description The issue allows an attacker to execute arbitrary code when cloning repositories with submodules. This is possible because Git can be fooled into...

PT-2024-4256

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore versions 4.0.1.1 through 4.0.1.998 Phoenix SecureCore versions 4.1.0.1 through 4.1.0.562 Phoenix SecureCore versions 4.2.0.1 through 4.2.0.323 Phoenix SecureCore versions 4.2.1.1 through 4.2.1.287 Phoenix SecureCore version...

The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield

With the browser becoming the most prevalent workspace in the enterprise, it is also turning into a popular attack vector for cyber attackers. From account takeovers to malicious extensions to phishing attacks, the browser is a means for stealing sensitive data and accessing organizational system...

PT-2024-32223

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.0.0 Description The issue is related to the removal of irq disabling in vcn 5 suspend in the Linux kernel. Specifically, the calls to disable IRQ and set state are removed, which gets rid of the warning "WARN ON!amdgpu i...

PT-2024-22045 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 tvOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description: The issue was addressed with improved memory handling. An app may be able to...

PT-2024-19559 · Panoramic · Hp Digital Imaging

Name of the Vulnerable Software and Affected Versions: Panoramic Corporation Digital Imaging Software version 9.1.2.7600 Description: The issue allows a local attacker to escalate privileges via the ccsservice.exe component. Recommendations: For version 9.1.2.7600, consider restricting access to...

PT-2024-28338 · WordPress · Add Custom Css/Js

Name of the Vulnerable Software and Affected Versions: Add Custom CSS and JS WordPress plugin versions 1.20 and earlier Description: The issue concerns the lack of CSRF checks in certain areas and missing sanitization as well as escaping in the plugin. This could allow attackers to make logged-in...