PT-2024-7671 · Cypress · Cypress Bluetooth Sdk

Name of the Vulnerable Software and Affected Versions: Cypress Bluetooth SDK version 3.66 Description: The issue is related to a buffer overflow in the memory when handling the data header length field of the LL Pause Enc Req, which is part of the Bluetooth Low Energy BLE technology. This can be...

PT-2024-22530 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: LimeSurvey versions prior to 6.5.12+240611 Description: A Cross Site Scripting vulnerability allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields. This issue enables the execution of arbitrar...

PT-2024-18947 · Ggit · Ggit

Name of the Vulnerable Software and Affected Versions: ggit versions all Description: The issue concerns Arbitrary Argument Injection via the clone API. This API allows specifying the remote URL to clone and the file on disk to clone to. However, the library fails to sanitize user input or valida...

PT-2024-18946

Name of the Vulnerable Software and Affected Versions ggit versions all Description The issue concerns Command Injection via the fetchTagsbranch API, which allows user input to specify the branch to be fetched. This input is then concatenated with a git command and passed to the unsafe exec Node....

PT-2024-21909 · Hewlett Packard · Hp Hotkey Support

Name of the Vulnerable Software and Affected Versions: HP Hotkey Support affected versions not specified Description: A potential security issue has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. This could let someone gain higher access rights...

PT-2024-30876

Name of the Vulnerable Software and Affected Versions Catch Themes Full frame versions 2.7.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a Stored XSS vulnerability. This...

PT-2024-32556 · WordPress · Wp-Downloadmanager

Name of the Vulnerable Software and Affected Versions: WP-DownloadManager versions 1.68.8 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This problem allows Reflected XSS. Recommendations: Fo...

PT-2024-32709 · WordPress · Wp-Webauthn

Name of the Vulnerable Software and Affected Versions: WP-WebAuthn versions 1.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or Stored XSS. This allows for Stored XSS attacks. Recommendations...

PT-2024-32562 · Chartify · Chartify

Name of the Vulnerable Software and Affected Versions: Chartify versions n/a through 2.7.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, which leads to Reflected XSS. This problem allows for Cross-site Scripting, where an attacker can inject...

PT-2024-32591 · Litespeed · Litespeed Cache

Name of the Vulnerable Software and Affected Versions: LiteSpeed Cache versions through 6.5.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or Stored XSS. This allows Stored XSS attacks. Recommendations:...

PT-2024-32600 · Unknown · Averta Depicter Slider

Name of the Vulnerable Software and Affected Versions: Averta Depicter Slider versions prior to 3.2.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Averta Depicter Slider...

PT-2024-32588 · Unknown · Paul Bearne Author Avatars List/Block

Name of the Vulnerable Software and Affected Versions: Paul Bearne Author Avatars List/Block versions 2.1.21 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means an...

PT-2024-32603 · WordPress · Wp Compress – Image Optimizer [All-In-One]

Name of the Vulnerable Software and Affected Versions: WP Compress – Image Optimizer All-In-One versions n/a through 6.20.13 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which c...

PT-2024-32679 · Unknown · Illid Advanced Woo Labels

Name of the Vulnerable Software and Affected Versions: ILLID Advanced Woo Labels versions n/a through 2.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which occurs due to...

PT-2024-39529 · WordPress · Re:Wp

Name of the Vulnerable Software and Affected Versions: Re:WP plugin for WordPress version 1.0.1 and earlier Description: The Re:WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This makes it...

PT-2024-30610 · Microchip · Timeprovider 4100

Name of the Vulnerable Software and Affected Versions: Microchip TimeProvider 4100 versions 1.0 and later Description: The issue is related to a URL Redirection to Untrusted Site 'Open Redirect' vulnerability that allows XSS Through HTTP Headers. This can lead to security issues, as it enables...

PT-2024-7223 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 GitHub Enterprise Server version 3.14.2 GitHub Enterprise Server version 3.13.5 GitHub Enterprise Server version 3.12.10 GitHub Enterprise Server version 3.11.16 Description: An information...

PT-2024-39515 · WordPress · Memberful

Name of the Vulnerable Software and Affected Versions: Memberful – Membership Plugin versions up to, and including, 1.73.7 Description: The issue is a Stored Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping on user-supplied attributes in the plugin's...

PT-2024-32854 · Json Lib +2 · Json-Lib +2

Name of the Vulnerable Software and Affected Versions: JSON-lib versions prior to 3.1.0 Description: The issue is related to the handling of an unbalanced comment string in the util/JSONTokener.java file. This flaw can be exploited due to the mishandling of such strings. Recommendations: For...

PT-2024-7441 · Draytek +1 · Draytek Vigor310 +1

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor310 versions through 4.3.2.6 Description: The issue is related to insufficiently robust encryption of data, which may allow a remote attacker to disclose protected information and perform a man-in-the-middle MITM attack...