Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office components. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, potentially gaining access to sensitive data in the victim's context. Successful exploitation requires the malicious party to tric...

PT-2024-39001 · Schneider Electric · Zelio Soft 2

Name of the Vulnerable Software and Affected Versions: Zelio Soft 2 versions prior to 5.4.2.2 Description: A Use After Free vulnerability exists that could cause arbitrary code execution, denial of service, and loss of confidentiality and integrity when an application user opens a malicious Zelio...

Intel® TDX Module Software Advisory

Summary: A potential security vulnerability in Intel® Trust Domain Extensions TDX Module firmware may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27457 Description: Improper check for unusual or...

PT-2025-11523 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection'. This could allow a high privileged...

PT-2024-7354

The Ivanti Cloud Services Appliance CSA is affected by an OS command injection issue in its admin web console, prior to version 5.0.2. This allows a remote authenticated attacker with admin privileges to obtain remote code execution. The vulnerable versions are all Ivanti CSA versions before 5.0....

PT-2024-10440 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance 10.0.2 Identity Manager Description: The issue is related to the transmission of user credentials in clear text by the Identity Manager component, which could be obtained by an attacker using man-in-the-middle...

PT-2024-7759 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.28 Description: The issue arises from the improper sanitization of the consolenewsection parameter when saving external links in links.php, which is then stored in the database and reflected back to the user in...

PT-2024-30895 · Viala · Viala

Name of the Vulnerable Software and Affected Versions: viala versions 1.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For versions...

PT-2024-30893 · Unknown · Temegum Gum Elementor Addon

Name of the Vulnerable Software and Affected Versions: TemeGUM Gum Elementor Addon versions 1.3.6 and earlier Description: The issue affects TemeGUM Gum Elementor Addon, allowing Stored XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting...

PT-2024-32556 · WordPress · Wp-Downloadmanager

Name of the Vulnerable Software and Affected Versions: WP-DownloadManager versions 1.68.8 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This problem allows Reflected XSS. Recommendations: Fo...

PT-2024-30899 · Elementor · Nicheaddons Restaurant & Cafe Addon For Elementor

Name of the Vulnerable Software and Affected Versions: NicheAddons Restaurant & Cafe Addon for Elementor versions 1.5.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS,...

PT-2024-32612 · Unknown · Quill Forms

Name of the Vulnerable Software and Affected Versions: Quill Forms versions through 3.7.0 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for Stored XSS attacks...

PT-2024-32588 · Unknown · Paul Bearne Author Avatars List/Block

Name of the Vulnerable Software and Affected Versions: Paul Bearne Author Avatars List/Block versions 2.1.21 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means an...

[SECURITY] [DSA 5781-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5781-1 [email protected] https://www.debian.org/security/ Andres Salomon October 03, 2024 https://www.debian.org/security/faq -...

PT-2024-39584 · WordPress · Auto Amazon Links – Amazon Associates Affiliate Plugin

Name of the Vulnerable Software and Affected Versions: The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress versions up to, and including, 5.4.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate...

PT-2024-8243

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 10.2.12 Palo Alto Networks PAN-OS versions prior to 11.0.6 Palo Alto Networks PAN-OS versions prior to 11.1.5 Palo Alto Networks PAN-OS versions prior to 11.2.4 Description An authentication bypass i...

PT-2024-9624

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description A stack-buffer overflow has been detected in the gst opus dec parse header function within gstopusdec.c. The pos array is a stack-allocated buffer of size 64. If n channels exceeds 64, the for lo...

PT-2024-24233 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: Flatpress version 1.3 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Flatpres...

PT-2024-32669 · Unknown · Logicytics

Name of the Vulnerable Software and Affected Versions: Logicytics versions prior to 2.3.2 Description: Logicytics is designed to harvest and collect data for forensic analysis. It has a basic vulnerability affecting compromised devices from shell injections. Recommendations: For versions prior to...

[SECURITY] [DLA 3907-1] sqlite3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3907-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 30, 2024 https://wiki.debian.org/LTS -...