PT-2024-28561 · Icegram · Icegram

Name of the Vulnerable Software and Affected Versions: Icegram versions 3.1.24 and earlier Description: The issue affects Icegram due to missing authorization, allowing access to functionality not properly constrained by ACLs. Recommendations: For Icegram versions 3.1.24 and earlier, update to a...

PT-2024-27555

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions n/a through 4.4.4 Description The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations For versions n/a...

PT-2024-27831 · WordPress · Wp Accessibility Helper

Name of the Vulnerable Software and Affected Versions: WP Accessibility Helper WAH versions 0.6.2.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means that...

PT-2024-30310 · Unknown · Creative Motion Robin

Name of the Vulnerable Software and Affected Versions: Creative Motion Robin image optimizer versions 1.6.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2024-30920 · Helloasso · Helloasso

Name of the Vulnerable Software and Affected Versions: HelloAsso versions 1.1.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.1.10 and earlier,...

PT-2024-30398 · WordPress · Meta Box

Name of the Vulnerable Software and Affected Versions: Meta Box – WordPress Custom Fields Framework versions through 5.9.10 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

PT-2024-30423 · Unknown · Clearfy Cache

Name of the Vulnerable Software and Affected Versions: Clearfy Cache versions 2.2.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Clearfy Cache versions...

PT-2024-32513 · Unknown · Fluent Support

Name of the Vulnerable Software and Affected Versions: Fluent Support versions 1.8.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.8.0 and...

PT-2024-30863 · Websiteinwp · Blogpoet

Name of the Vulnerable Software and Affected Versions: WebsiteinWP Blogpoet versions 1.0.3 and earlier Description: The issue is related to missing authorization in the Blogpoet theme, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certain...

PT-2024-27564 · Unknown · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid versions through 5.8.7 Description: The issue is related to a Missing Authorization vulnerability in ProfileGrid User Profiles, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

RHEL 8 : Satellite 6.14.4.3 Async Update (Important) (RHSA-2024:8718)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8718 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

PT-2024-12954 · Unknown · Pechenki Telsender

Name of the Vulnerable Software and Affected Versions: Pechenki TelSender versions 1.14.11 and earlier Description: The issue is related to a Missing Authorization vulnerability in Pechenki TelSender, which allows exploitation of incorrectly configured access control security levels...

PT-2024-16398 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 2017 up to 11.10 Description: A critical issue has been found in Tongda OA, affecting an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the where repeat argument lea...

Consul L7 Intentions Vulnerable To Headers Bypass

Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that using Headers in L7 traffic intentions could bypass HTTP header based access rules. This vulnerability, identified as CVE-2024-10006, is fixed in Consul Community Edition 1.20.1 and Consul Enterprise 1.20.1,...

PT-2024-34588 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function. Recommendations: For Draytek Vigor3900 version...

[SECURITY] [DLA 3940-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3940-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2024 https://wiki.debian.org/LTS -...

PYSEC-2024-210

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

PT-2024-33631 · Unknown · Wpkoi Templates For Elementor

Name of the Vulnerable Software and Affected Versions: WPKoi Templates for Elementor versions 3.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-10750 · Unknown · Asio C++ Library

Name of the Vulnerable Software and Affected Versions: Asio C++ Library versions prior to 1.13.0 Description: The issue is related to a lack of a fallback error code in the case of SSL ERROR SYSCALL with no associated error information from the SSL library being used. This is a high-severity...

PT-2024-39604 · WordPress · Kata Plus – Addons For Elementor – Widgets

Name of the Vulnerable Software and Affected Versions: The Kata Plus – Addons for Elementor – Widgets, Extensions and Templates plugin for WordPress versions up to, and including, 1.4.7 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input...