AutomationDirect C-More EA9 Programming Software

RISK EVALUATION Successful exploitation of these vulnerabilities could result in memory corruption; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities...

PT-2024-35750 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA version 3.2.0 Description: Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gateway pagamento.php allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id...

PT-2024-29790 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue allows a user to embed arbitrary HTML tags in the Web UI, potentially leading to sensitive information disclosure. This is due to an HTML injection...

PT-2024-9187

Name of the Vulnerable Software and Affected Versions: Django versions 4.2 through 4.2.17 Django versions 5.0 through 5.0.10 Django versions 5.1 through 5.1.4 Description: An issue was discovered in Django when using an Oracle database. Direct usage of the django.db.models.fields.json.HasKey look...

PT-2024-35142 · Tenda · Tenda Ac6V2

Name of the Vulnerable Software and Affected Versions: Tenda AC6V2 versions through 15.03.06.50 Description: The issue is a stack-based buffer overflow vulnerability in the fromAdvSetLanip module, specifically with the lanMask argument, allowing buffer overflows. This problem affects Tenda AC6V2...

FESTO CODESYS

GENERAL RECOMMENDATION As part of a security strategy, Festo recommends the following general defense measures to reduce the risk of exploits: - Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside - Use...

Open Automation Software

RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to...

Ruijie Reyee OS (Update A)

RISK EVALUATION Successful exploitation of this vulnerabilities could allow attackers to take near full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

PT-2024-33532 · Google · Android 12 +2

Name of the Vulnerable Software and Affected Versions: Quick Share Agent versions prior to 3.5.14.47 in Android 12 Quick Share Agent versions prior to 3.5.19.41 in Android 13 Quick Share Agent versions prior to 3.5.19.42 in Android 14 Description: The issue allows adjacent attackers to write file...

PT-2024-36947

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description A vulnerability in the Linux kernel has been resolved, related to the High-availability Seamless Redundancy HSR protocol. The issue arises from the hsr init skb function not allocating sufficie...

PT-2024-33531 · Gaminghub · Gaminghub

Name of the Vulnerable Software and Affected Versions: GamingHub versions prior to 6.1.04.6 in Korea GamingHub versions prior to 7.1.03.7 in Global Description: The issue is related to the improper handling of responses in GamingHub, allowing remote attackers to launch arbitrary activity...

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update C)

RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to perform proper impact...

CVE-2024-52457

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in youneeq Youneeq Recommendations youneeq-panel allows Reflected XSS.This issue affects Youneeq Recommendations: from n/a through = 3.0.7...

CVE-2024-52457

CVE-2024-52457 describes a Reflected Cross-Site Scripting (XSS) in the WordPress plugin Youneeq Recommendations (versions

CVE-2024-52457 WordPress Youneeq Recommendations plugin <= 3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in youneeq Youneeq Recommendations youneeq-panel allows Reflected XSS.This issue affects Youneeq Recommendations: from n/a through = 3.0.7...

CVE-2024-52457 WordPress Youneeq Recommendations plugin <= 3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in youneeq Youneeq Recommendations youneeq-panel allows Reflected XSS.This issue affects Youneeq Recommendations: from n/a through = 3.0.7...

PT-2024-35297 · Unknown · Youniq Recommendations

Name of the Vulnerable Software and Affected Versions: Youniq Recommendations versions n/a through 3.0.7 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations: For...

PT-2024-35883 · Sergio Micó · Simpleschema

Name of the Vulnerable Software and Affected Versions: SimpleSchema versions through 1.7.6.9 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS. A Cross-site Scripting XSS...

PT-2024-16862 · WordPress · Sassy Social Share

Name of the Vulnerable Software and Affected Versions: The Social Sharing Plugin – Sassy Social Share plugin for WordPress versions up to, and including, 3.3.69 Description: The issue is related to Reflected Cross-Site Scripting via the heateor mastodon share parameter due to insufficient input...

PT-2024-35439 · Dcme-320 +3 · Dcme-320 +3

Name of the Vulnerable Software and Affected Versions: DCME-320 versions prior to 7.4.12.90 DCME-520 versions prior to 9.25.5.11 DCME-320-L versions prior to 9.3.5.26 DCME-720 versions prior to 9.1.5.11 Description: The issue allows for Remote Code Execution and Privilege Escalation via the...