PT-2024-2881 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to improper buffer restrictions in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to potentially...

PT-2024-2223 · Intel · Intel Thunderbolt Controllers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM Controllers versions prior to 41 Description: The issue is related to improper access control in the firmware of some IntelR ThunderboltTM Controllers, which may allow a privileged user to enable denial of service via loc...

PT-2024-1668 · Microsoft · Skype For Business

Name of the Vulnerable Software and Affected Versions: Skype for Business affected versions not specified Description: The issue is related to insufficient protection of sensitive data due to incorrect access restriction, potentially allowing a remote attacker to gain unauthorized access to...

PT-2024-20529 · Typo3 Cms +1 · Typo3/Cms +1

Name of the Vulnerable Software and Affected Versions: sf event mgt versions prior to 7.4.0 Description: The existing access control check for events in the backend module of sf event mgt, an event management and registration extension for the TYPO3 CMS, got broken during the update to TYPO3 12.4...

PT-2024-17984 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.12 GitHub Enterprise Server version 3.11.5 GitHub Enterprise Server version 3.10.7 GitHub Enterprise Server version 3.9.10 GitHub Enterprise Server version 3.8.15 Description: A command injection...

Siemens Simcenter Femap

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2024-17144 · Mapshaper · Mapshaper

Name of the Vulnerable Software and Affected Versions: mapshaper versions prior to 0.6.44 Description: The issue is related to a path traversal vulnerability, which may lead to information disclosure. An attacker can exploit this to potentially access sensitive information. The estimated number o...

PT-2024-3487 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: autogpt versions up to v0.5.0 Description: An OS command injection issue exists due to the improper neutralization of special elements used in an OS command. This allows for arbitrary code execution if an attacker can inject shell commands,...

Unrestricted File Upload

Apache Solr is vulnerable to Unrestricted File Upload. The vulnerability is due to the ConfigSets API accepting and uploading jar/class files without proper restriction of file type. When backing up Solr Collections, the configSet files will be saved to disk, but if the backup directory is includ...

PT-2024-15661 · WordPress · Smart Manager

Name of the Vulnerable Software and Affected Versions: The Smart Manager WordPress plugin versions prior to 8.28.0 Description: The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection. This can be...

PT-2024-13730 · Ellucian · Ellucian Banner

Name of the Vulnerable Software and Affected Versions: Ellucian Banner version 9.17 Description: The issue allows Insecure Direct Object Reference IDOR via a modified bannerId to the "/StudentSelfService/ssb/studentCard/retrieveData" endpoint. This means an attacker could potentially access...

PT-2024-15364 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is an OS Command Injection Vulnerability in the svc acldb dump utility of Dell Unity. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of...

PT-2024-18016 · Linksys · Linksys Wrt54G

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL version 4.30.18 Description: A vulnerability was found in the Web Management Interface component, specifically affecting the file /SysInfo1.htm. This issue leads to information disclosure. The vendor was contacted about this...

PT-2024-19917 · Unknown · Calculators World Cc Bmi Calculator

Name of the Vulnerable Software and Affected Versions: Calculators World CC BMI Calculator versions n/a through 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Calculators...

PT-2024-15675 · WordPress · The Awesome Support – Wordpress Helpdesk & Support Plugin

Name of the Vulnerable Software and Affected Versions: The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress versions up to, and including, 6.1.7 Description: The issue is related to a union-based SQL Injection vulnerability via the q parameter of the wpas get users actio...

PT-2024-21111 · Samly · Samly

Name of the Vulnerable Software and Affected Versions: Samly package versions prior to 1.4.0 for Elixir Description: The issue arises from the Samly.State.Store.get assertion/3 function, which can return an expired session. This interferes with access control because Samly.AuthHandler uses a cach...

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected version...

CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

Min Security breach

Min is a fast, minimalist browser from Min Open Source. A security vulnerability exists in versions prior to Min 1.31.0, which stems from an incorrect restriction on local files resulting in a security hole...

PT-2024-18015 · Linksys · Linksys Wrt54G

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL version 4.30.18 Description: A vulnerability was found in the Web Management Interface of the Linksys WRT54GL, affecting an unknown part of the file /wlaninfo.htm. This issue leads to information disclosure. The exploit has be...