PT-2024-8733 · Timgeyssens · Uiomatic

Name of the Vulnerable Software and Affected Versions: TimGeyssens UIOMatic version 5 Description: A critical vulnerability has been found in the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r, which can lead to SQL injection. The attack can be initiated remotely. The exploit ha...

PT-2024-31624 · Zoom · Zoom Product Suite

Name of the Vulnerable Software and Affected Versions: Zoom Product Suite versions prior to 6.2.0 Description: A buffer overflow issue in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access. This issue can be exploited by authenticated users,...

PT-2024-20850 · Sublime Text · Sublime Text

Name of the Vulnerable Software and Affected Versions: Sublime Text version 4 Description: A command injection issue was found in Sublime Text via the New Build System module. It is noted that multiple third parties report this behavior as intended. Recommendations: For Sublime Text version 4, as...

PT-2024-8645 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.7R4 Description: A race condition in Ivanti Secure Access Client allows a local authenticated attacker to modify sensitive configuration files. This issue is related to synchronization errors...

PT-2024-34719 · WordPress · Wpza Amp Img Shortcode

Name of the Vulnerable Software and Affected Versions: WPZA AMP Img Shortcode versions 1.0.0 through 1.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker...

PT-2024-10761 · Cypress +1 · Cypress Wireless Combo Chips +1

Name of the Vulnerable Software and Affected Versions: Cypress and Broadcom Wireless Combo chips versions prior to the January 2021 firmware update Description: The issue allows memory read access via a "Spectra" attack when a January 2021 firmware update is not present. This affects specific...

PT-2024-16725 · Unknown · Amtt Hotel Broadband Operation System

Name of the Vulnerable Software and Affected Versions: AMTT Hotel Broadband Operation System versions up to 3.0.3.151204 Description: A critical issue has been found in the AMTT Hotel Broadband Operation System. It affects an unknown function of the file /manager/frontdesk/online status.php. The...

PT-2024-34720 · Bpmn Io · Bpmn.Io

Name of the Vulnerable Software and Affected Versions: bpmn.Io versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where an attacker can inject malicious...

PT-2024-34913 · Unknown · Elementsready Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementsReady Addons for Elementor versions n/a through 6.4.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-34744 · Unknown · Simple Job Manager

Name of the Vulnerable Software and Affected Versions: Simple Job Manager versions n/a through 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

PT-2024-16387 · WordPress · Leopard - Wordpress Offload Media

Name of the Vulnerable Software and Affected Versions: Leopard - WordPress Offload Media plugin versions up to, and including, 3.1.1 Description: The issue allows unauthorized modification of data, leading to privilege escalation due to a missing capability check on the import settings function...

PT-2024-34855 · Unknown · Narnoo Commerce Manager

Name of the Vulnerable Software and Affected Versions: Narnoo Commerce Manager versions 1.6.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

PT-2024-34740 · Unknown · Themeshark Templates & Widgets For Elementor

Name of the Vulnerable Software and Affected Versions: ThemeShark Templates & Widgets for Elementor versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, wher...

PT-2024-34416 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...

PT-2024-26495 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A stack overflow issue was discovered in the init local vars function at /src/vmir wasm parser.c. This issue affects the vmir software, allowing for potential exploitation. Recommendations: For version e8117,...

PT-2024-32983 · Sunniwell · Sunniwell Ht3300

Name of the Vulnerable Software and Affected Versions: sunniwell HT3300 versions before 1.0.0.B022.2 Description: The issue concerns insecure permissions in the sunniwell HT3300 device, specifically with the /usr/local/bin/update program, which is used for software updates and has the execution...

PT-2024-26491 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A heap buffer overflow issue was discovered in vmir via the wasm call function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm call function, which can lead to a heap buffer overflow...

PT-2024-34417 · Sdcms · Sdcms

Name of the Vulnerable Software and Affected Versions: SDCMS version 2.8 Description: The theme.php file in SDCMS has a command execution vulnerability that allows for the execution of system commands. Recommendations: For SDCMS version 2.8, consider disabling the theme.php file or restricting it...

PT-2024-19145 · Netapp · Storagegrid

Name of the Vulnerable Software and Affected Versions: StorageGRID formerly StorageGRID Webscale versions prior to 11.9 Description: The issue is a Denial of Service DoS vulnerability that can be exploited by an authenticated attacker, potentially leading to a service crash. Recommendations: For...

PT-2024-35091 · Hapi Fhir · Hapi Fhir

Name of the Vulnerable Software and Affected Versions: HAPI FHIR versions prior to 6.4.0 Description: The XSLT parsing performed by various components in HAPI FHIR is vulnerable to XML external entity injections. This issue can be exploited by submitting a malicious XML file with a DTD tag,...