PT-2024-3006 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 123.0.6312.122 Description: The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This can be achieved through the use of a specially designed web page, potentially...

Medium: libdwarf

Issue Overview: In a multiply-corrupted DWARF object libdwarf may try to deallocfree an allocation twice. Results are unpredictable and various. This has been a possibility since we added code to prevent leaks when generating 'unattached' DwarfError records where there is no DwarfDebug available ...

PT-2024-14897

Name of the Vulnerable Software and Affected Versions Egehan Security WebPDKS versions through 20240329 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vendor w...

PT-2024-23036

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 1.5.93 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

PT-2024-23240 · Unknown · Gs Pins For Pinterest

Name of the Vulnerable Software and Affected Versions: GS Pins for Pinterest versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For GS...

PT-2024-23241

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions 4.1.17 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject malicious...

PT-2024-12657 · Inspirythemes · Inspirythemes Realhomes

Name of the Vulnerable Software and Affected Versions: Inspirythems RealHomes versions through 4.0.2 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the InspiryThemes RealHomes software. Recommendations: For versions through 4.0.2, update to ...

PT-2024-2093 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to a flaw in the verification of the SMM communication buffer, which could allow an attacker...

NetApp SnapCenter Improper Authorization Vulnerability - Lenovo Support US

No description provided...

PT-2024-15837

Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue concerns command injection in the IrGraph.draw function. Recommendations For paddlepaddle/paddle version 2.6.0, update to a version that fixes the command injection issue in the...

Low: grub2

Issue Overview: A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporar...

PT-2024-2116

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.11.4 Description A path traversal issue exists that allows for the bypass of authentication procedures by using an alternative path or channel. This can enable a remote attacker to perform limited...

Important: cifs-utils

Issue Overview: A stack-based buffer overflow issue was found in pifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root privileges. CVE-2022-27239 A flaw was found in cifs-utils. When verbose logging is enabled, invalid credentials file lines may be...

PT-2024-14189 · WordPress · Crm Perks Forms – Wordpress Form Builder

Name of the Vulnerable Software and Affected Versions: CRM Perks Forms – WordPress Form Builder versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that...

PT-2024-19232 · Unknown · Magazine3 Schema & Structured Data For Wp & Amp

Name of the Vulnerable Software and Affected Versions: Magazine3 Schema & Structured Data for WP & AMP versions 1.25 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an...

PT-2024-15004 · WordPress · Email Subscription Popup

Name of the Vulnerable Software and Affected Versions: Email Subscription Popup WordPress plugin versions prior to 1.2.20 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back ...

PT-2024-14541 · WordPress · Ovic Responsive Wpbakery Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Ovic Responsive WPBakery WordPress plugin versions prior to 1.2.9 Description: The issue allows attackers with a subscriber+ account to update blog options, such as users can register and default role, via some of its AJAX actions. It also...

PT-2023-31840 · WordPress · Uncode

Name of the Vulnerable Software and Affected Versions: Uncode - Creative & WooCommerce WordPress Theme versions 2.8.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This...

PT-2023-31378 · WordPress · Soledad

Name of the Vulnerable Software and Affected Versions: Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme versions through 8.4.1 Description: The issue is related to Deserialization of Untrusted Data, which affects the Soledad theme for WordPress. This allows an attacker to...

PT-2023-19055 · Gallagher · Gallagher Command Centre

Name of the Vulnerable Software and Affected Versions: Gallagher Command Centre versions 8.50 and prior Gallagher Command Centre versions 8.60 prior to vEL8.60.2550 MR7 Gallagher Command Centre versions 8.70 prior to vEL8.70.2375 MR5 Gallagher Command Centre versions 8.80 prior to vEL8.80.1369 MR...