PT-2024-30465 · Unknown · Speedycache

Name of the Vulnerable Software and Affected Versions: SpeedyCache versions 1.1.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the SpeedyCache plugin. This allows an attacker to perform unintended actions on a user's account. Users are urged to upgrade to mitigate risk...

PT-2024-31176 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a stack overflow via the adv.iptv.stballvlans parameter in the formGetIptv function. This allows for potential exploitation. No information is provided about the estimated numb...

PT-2024-30461 · WordPress · Wp Data Access

Name of the Vulnerable Software and Affected Versions: WP Data Access versions through 5.5.7 Description: A Cross-Site Request Forgery CSRF issue affects the WP Data Access plugin, allowing potential attacks. Upgrade to a newer version to protect against this issue. Recommendations: For versions...

PT-2024-30200 · Testlink · Testlink

Name of the Vulnerable Software and Affected Versions: TestLink versions prior to 1.9.20 Description: The issue allows for Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name. Recommendations: For versions prior to 1.9.2...

PT-2024-30427 · Mediavine · Create By Mediavine

Name of the Vulnerable Software and Affected Versions: Create by Mediavine versions 1.9.8 and earlier Description: This issue exposes sensitive information to unauthorized actors. Users are urged to upgrade to the latest version to mitigate risks. Recommendations: For versions 1.9.8 and earlier,...

PT-2024-31572 · Unknown +6 · App::Cpanminus +6

Name of the Vulnerable Software and Affected Versions: App::cpanminus versions 1.7047 and earlier Description: The App::cpanminus package for Perl downloads code via insecure HTTP, enabling code execution for network attackers. This issue allows attackers to intercept traffic. Recommendations: Fo...

PT-2024-30432 · WordPress · Wpbackitup Backup/Restore

Name of the Vulnerable Software and Affected Versions: WPBackItUp Backup and Restore WordPress versions 1.50 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WPBackItUp Backup and Restore WordPress plugin. This allows an attacker to perform unintended actions on a user...

PT-2024-31522 · Skysystem · Arfa-Cms

Name of the Vulnerable Software and Affected Versions: SkySystem Arfa-CMS versions prior to 5.1.3124 Description: A SQL injection issue in the poll component allows remote attackers to execute arbitrary SQL commands via the psid parameter. This enables attackers to manipulate database queries,...

AlmaLinux 8 : nodejs:20 (ALSA-2024:5814)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5814 advisory. node-tar: denial of service while parsing a tar file due to lack of folders depth validation CVE-2024-28863 nodejs: Bypass network import restriction via...

SUSE CVE-2024-7634

NGINX Agent's "configdirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory...

PT-2024-38838 · Unknown · Sourcecodester Interactive Map With Marker

Name of the Vulnerable Software and Affected Versions: SourceCodester Interactive Map with Marker version 1.0 Description: A vulnerability was found in SourceCodester Interactive Map with Marker. It has been classified as problematic and affects an unknown part of the file...

PT-2024-38835 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Pharmacy Management System. This issue affects the file /index.php?action=editSalesman and is related to the...

PT-2024-38827 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical vulnerability was found in the code-projects Pharmacy Management System. The issue affects the function editManager of the file /index.php?action=editManager of the...

UBUNTU-CVE-2024-23185

Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...

CVE-2024-43105

Mattermost Plugin Channel Export (github.com/mattermost/mattermost-plugin-channel-export) is affected: versions ≤ 1.0.0 do not correctly restrict concurrent /export executions, enabling a user to initiate multiple simultaneous runs and cause resource exhaustion. Root cause: lack of concurrency co...

PT-2024-30003 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: publiccms versions V4.0.202302.e and before Description: The issue concerns an Any File Upload vulnerability via the "publiccms/admin/cmsTemplate/saveMetaData" endpoint. This allows unauthorized file uploads, potentially leading to security...

PT-2024-38808 · Thinkgem · Thinkgem Jeesite

Name of the Vulnerable Software and Affected Versions: thinkgem JeeSite version 5.3 Description: A problem was found in the processing of the file /js/a/login of the component Cookie Handler. The manipulation of the argument skinName leads to cross site scripting. The attack may be initiated...

PT-2024-31142 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version V1.2.0.88155 EN Description: The issue is a Buffer Overflow vulnerability via the function fromSetIpBind. This vulnerability can lead to remote code execution RCE. There is no information about the estimated number of...

PT-2024-36592 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8121 Description: The issue concerns an authenticated SQL injection vulnerability in the extranet lockouts report option. This vulnerability can be exploited by authenticated users, potentiall...

CVE-2024-7634

NGINX Agent's "configdirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory...