14536 matches found
PT-2024-30355 · Unknown · Parcelpanel
Name of the Vulnerable Software and Affected Versions: ParcelPanel versions n/a through 4.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in ParcelPanel. Recommendations: Fo...
PT-2024-29978 · Unknown · Skyport Daemon
Name of the Vulnerable Software and Affected Versions: Skyport Daemon versions prior to 0.2.2 Description: The issue is related to the Skyport Daemon skyportd, which is the daemon for the Skyport Panel. It can be exploited by creating thousands of folders and files, taking advantage of the lack o...
PT-2024-27836 · Themesphere · Themesphere Smartmag
Name of the Vulnerable Software and Affected Versions: ThemeSphere SmartMag versions prior to 9.3.0 Description: The issue is related to Exposure of Sensitive Information to an Unauthorized Actor and Missing Authorization vulnerability. It allows excavation and accessing functionality not properl...
PT-2024-30326 · Wapppress · Wapppress
Name of the Vulnerable Software and Affected Versions: WappPress versions through 6.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions throu...
PT-2024-38498 · Sourcecodester · Sourcecodester Car Driving School Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Car Driving School Management System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in the save package function of the /classes/Master.php?f=sav...
PT-2024-38479 · WordPress · Opal Membership
Name of the Vulnerable Software and Affected Versions: Opal Membership plugin for WordPress versions up to and including 1.2.4 Description: The issue allows authenticated attackers with subscriber-level access and above to view private notes that should be restricted to administrators. This is...
PT-2024-38472 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been found in the processing of the file delete register.php, where the manipulation of the case register id argument leads to SQL...
Mozilla Firefox ESR Security Update (MFSA2024-34) - Mac OS X
Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
PT-2024-33846
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A potential out-of-bounds OOB array access issue was found in the ALSA: asihpi driver of the Linux kernel. The ASIHPI driver stores values in a static array based on a response from the drive...
CVE-2024-42243
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAXPAGECACHEORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cache size. More details can be found from t...
PT-2024-26022 · Samsung · Samsungnotesservice
Name of the Vulnerable Software and Affected Versions: SamsungNotesService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungNotesService, allowing local attackers to bypass restrictions on starting services from the background. This...
GO-2024-3032 Mattermost did not properly restrict channel creation in github.com/mattermost/mattermost-server
Mattermost did not properly restrict channel creation in github.com/mattermost/mattermost-server...
CVE-2024-7540
oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
PT-2024-25606 · Paypal · Paypal
Name of the Vulnerable Software and Affected Versions: PayPal, Credit Card and Debit Card Payment version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This can lead to the retrieval of all information...
PT-2024-5838 · Calibre · Calibre
Name of the Vulnerable Software and Affected Versions: Calibre versions prior to 7.14.0 Description: The issue is related to path traversal in the software, allowing unauthenticated attackers to achieve arbitrary file read. This is due to incorrect restriction of the directory path name with...
PT-2024-6476
Name of the Vulnerable Software and Affected Versions Apache Tomcat Connectors versions 1.2.9-beta through 1.2.49 Description The issue allows local users to view and modify shared memory containing mod jk configuration, which may lead to information disclosure and/or denial of service. This issu...
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity...
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity...