PT-2024-19910 · WordPress · Bplugins Pdf Poster

Name of the Vulnerable Software and Affected Versions: bPlugins PDF Poster – PDF Embedder Plugin for WordPress versions 2.1.17 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XS...

PT-2024-20361 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered, which can be exploited via the pppoePass parameter in the setIpv6Cfg function. This allows attackers to inject commands, potentially leading...

PT-2024-1641 · Splunk · Splunk Add-On Builder

Name of the Vulnerable Software and Affected Versions: Splunk Add-on Builder versions prior to 4.1.4 Description: The issue is related to the application writing user session tokens to its internal log files when visiting the Splunk Add-on Builder or when building or editing a custom app or add-o...

PT-2024-14070 · Unknown · Ros2 Foxy Fitzroy

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy versions 2 Description: Insecure deserialization in ROS2 allows attackers to execute arbitrary code via a crafted input. The issue affects ROS2 Foxy Fitzroy with ROS VERSION=2 and ROS PYTHON VERSION=3. Recommendations: For...

PT-2024-20366 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the desc parameter in the setWiFiAclRules function. This allows for potential command injection attacks. Recommendations: For TOTOLINK...

PT-2024-19013

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 4.2.0 Description The vantage6 technology is used to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. It is possible to find out usernames from the response...

CVE-2023-6165

The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

PT-2024-16083 · Unknown · Gabriels Ftp Server

Name of the Vulnerable Software and Affected Versions: Gabriels FTP Server version 1.2 Description: A problematic issue affects some unknown processing in the software. The manipulation of the USERNAME argument leads to denial of service. The attack may be initiated remotely. It is estimated that...

PT-2024-1320 · Totolink · Totolink N200Re

Name of the Vulnerable Software and Affected Versions: Totolink N200RE version 9.3.5u.6139 B20201216 Description: A critical vulnerability has been found, affecting the main function of the /cgi-bin/cstecgi.cgi file. This issue leads to a stack-based buffer overflow, which can be exploited...

PT-2024-16026 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting the edit-profile.php file. The issue arises from the manipulation of the fullname, phone, date of birth,...

CVE-2023-6165: Improper Neutralization of Input During Web Page Generation

The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

PT-2024-16123 · Codeastro · Codeastro Simple Student Result Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Student Result Management System version 5.6 Description: A problematic issue was found in the CodeAstro Simple Student Result Management System. This issue affects the /add classes.php file of the Add Class Page component. T...

WordPress plugin Restrict Usernames Emails Characters Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-1312 · Tenda · Tenda I6

Name of the Vulnerable Software and Affected Versions: Tenda i6 version 1.0.0.93857 Description: A critical issue was found in the formSetAutoPing function of the httpd component, specifically in the file /goform/setAutoPing. The manipulation of the ping1 argument leads to a stack-based buffer...

PT-2024-15940

Name of the Vulnerable Software and Affected Versions flink-extended ai-flow version 0.3.1 Description A critical issue has been found, affecting the function cloudpickle.loads of the file ai flowclicommandsworkflow command.py. This issue leads to deserialization and can be exploited remotely. Th...

PT-2024-15939 · Unknown · Stanfordvl Gibsonenv +1

Name of the Vulnerable Software and Affected Versions: StanfordVL GibsonEnv version 0.3.1 Description: A critical issue has been found, affecting the cloudpickle.load function of the file gibsonutilspposgd fuse.py. This issue leads to deserialization and can be exploited remotely. The complexity ...

PT-2024-13545 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the kimono-oldnew mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: F...

PT-2024-1439 · Unknown · Systemk Nvr

Name of the Vulnerable Software and Affected Versions: SystemK NVR versions 2.3.5SK.30084998 and prior Description: The issue is related to a command injection vulnerability in the dynamic domain name system DDNS settings. This vulnerability could allow an attacker to execute arbitrary commands...

PT-2024-1423

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.28 Description The issue is related to an integer overflow in the raid5 cache count function of the Linux kernel's RAID driver. This can potentially allow an attacker to impact the confidentiality, integrity,...

PT-2024-1306

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.8.1 Description The issue is related to the deserialization mechanism in Apache Airflow, allowing a potential attacker to poison the XCom data by bypassing the protection of the enable xcom pickling=False...