PT-2024-16833

Name of the Vulnerable Software and Affected Versions EasyPHP version 14.1 Description The issue is an absolute path traversal vulnerability, which could allow remote users to bypass SecurityManager restrictions and retrieve any file stored on the server. This is achieved by setting consecutive...

PT-2024-16828 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.51 Description: A critical issue affects the function editFile of the file application/admin/logic/FilemanagerLogic.php. The manipulation of the argument activepath leads to path traversal. The attack may be initiated...

PT-2024-34436 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was discovered in the /admin/department.php file. This allows remote attackers to execute arbitrary scripts via the d and pi...

PT-2024-16666 · WordPress · Migration

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging – WPvivid plugin for WordPress versions up to, and including, 0.9.107 Description: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted...

PT-2024-34834 · Fraudlabs Pro · Fraudlabs Pro Sms Verification

Name of the Vulnerable Software and Affected Versions: FraudLabs Pro SMS Verification versions 1.10.1 and earlier Description: A Cross-Site Request Forgery CSRF issue exists in FraudLabs Pro SMS Verification, allowing Stored XSS. Recommendations: For versions 1.10.1 and earlier, update to a versi...

PT-2024-33685

Name of the Vulnerable Software and Affected Versions: tsMuxer version nightly-2024-03-14-01-51-12 Description: A heap-based buffer overflow in tsMuxer allows attackers to cause Denial of Service DoS, Information Disclosure, and Code Execution via a crafted MKV video file. Recommendations: For...

PT-2024-34440 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /admin/calendar of events.php endpoint, allowing remote attackers to execute arbitrary scripts via the date start...

PT-2024-34432 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was discovered in the /admin/teachers.php file of the KASHIPARA E-learning Management System Project. The firstname and lastname parameters are...

PT-2024-38774 · Progress · Telerik Document Processing Libraries

Name of the Vulnerable Software and Affected Versions: Progress Telerik Document Processing Libraries versions prior to 2024 Q4 2024.4.1106 Description: The issue arises when importing a document with unsupported features, leading to excessive processing and excessive use of computing resources...

PT-2024-28832 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: A full path disclosure issue allows attackers to obtain the root path of the application via unspecified vectors. This could potentially be exploited to gain...

PT-2024-19093 · Intel · Intel(R) Tdx Seamldr Module

Name of the Vulnerable Software and Affected Versions: IntelR TDX Seamldr module software versions prior to 1.5.02.00 Description: Sensitive information in a resource is not removed before reuse in some IntelR TDX Seamldr module software, which may allow a privileged user to potentially enable...

PT-2024-38244 · Telerik · Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2024 Q4 10.3.24.1112 Description: The encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information. Recommendations: For versions...

PT-2024-8713 · Siemens · Scalance Mum856-1 +13

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions prior to V8.2 RUGGEDCOM RM1224 LTE4G NAM versions prior to V8.2 SCALANCE M804PB versions prior to V8.2 SCALANCE M812-1 ADSL-Router versions prior to V8.2 SCALANCE M816-1 ADSL-Router versions prior to V8.2...

PT-2024-8155 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to a buffer overfl...

PT-2024-10909 · Sercomm · Sercomm

Name of the Vulnerable Software and Affected Versions: Sercomm Model Etisalat Model S3- AC2100 affected versions not specified Description: The issue is related to Cross Site Scripting XSS via the firmware update page. This high-severity vulnerability impacts specific versions of Sercomm products...

PT-2024-8819 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10852 Description: The issue is related to insecure inherited permissions in IntelR CIP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8773 · Intel +1 · Intel Vpl +1

Name of the Vulnerable Software and Affected Versions: Intel VPL versions prior to 24.1.4 Description: The issue is related to improper buffer restrictions in Intel VPL software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to t...

PT-2024-16775 · Unknown · Lingdang Crm

Name of the Vulnerable Software and Affected Versions: Lingdang CRM versions up to 8.6.4.3 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /crm/wechatSession/index.php?msgid=1&operation=upload. The manipulation of the file argument...

PT-2024-8838 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: Intel Distribution for Python versions prior to 2024.2 Description: The issue is related to incorrect default permissions in the Intel Distribution for Python software. This can potentially allow an authenticated user to escalate their...

PT-2024-16760 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment versions prior to the latest release Description: A critical issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to SQL injection. The attack may be initiate...