PT-2024-26645 · Thimpress · Thimpress Eduma

Name of the Vulnerable Software and Affected Versions: ThimPress Eduma versions n/a through 5.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. Recommendations: For versions n/a...

PT-2024-26641

Name of the Vulnerable Software and Affected Versions Code for Recovery 12 Step Meeting List versions from n/a through 3.14.33 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

PT-2024-26684 · Yith · Yith Custom Login

Name of the Vulnerable Software and Affected Versions: YITH Custom Login versions 1.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For YI...

PT-2024-4353 · Google · Google Updator +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 1.3.36.351 Description: The issue is related to an inappropriate implementation in Google Updator, which allows a local attacker to perform privilege escalation via a malicious file. The severity of this issue ...

PT-2024-58: Insecure password storage in Yealink Meeting Server (YMS)

The vulnerability was identified in Yealink Meeting Server YMS, versions V26.0.0.67. The discovered vulnerability allows an attacker to obtain static key data, allowing user passwords to be decrypted. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 06.06.2024...

PT-2024-26889 · WordPress · Music Store

Name of the Vulnerable Software and Affected Versions: Music Store - WordPress eCommerce versions prior to 1.1.14 Description: A SQL injection issue allows a remote authenticated attacker with administrative privileges to execute arbitrary SQL commands, potentially obtaining or altering informati...

PT-2024-4425

Name of the Vulnerable Software and Affected Versions PyMongo versions 4.6.2 and earlier Description The issue is related to an out-of-bounds read in the 'bson' module, allowing deserialization of malformed BSON provided by a server. This can lead to an exception that may contain arbitrary...

PT-2024-21857 · Samsung · Exynos 1280 +4

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 980 Samsung Mobile Processor Exynos 850 Samsung Mobile Processor Exynos 1280 Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1330 Description: An issue was discovered in the function slsi n...

PT-2024-13425 · Unknown · Defender Security

Name of the Vulnerable Software and Affected Versions: Defender Security versions n/a through 4.2.0 Description: The issue is related to an Improper Authentication vulnerability, allowing access to functionality not properly constrained by ACLs. Recommendations: For Defender Security versions n/a...

PT-2024-26619 · Netgsm · Netgsm

Name of the Vulnerable Software and Affected Versions: Netgsm versions 2.9.19 and earlier Description: The issue is related to a Missing Authorization vulnerability in Netgsm. Recommendations: For versions 2.9.19 and earlier, update to a version that contains a fix for this issue. At the moment,...

PT-2024-26615 · Sendinblue · Brevo Newsletter

Name of the Vulnerable Software and Affected Versions: Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue versions n/a through 3.1.77 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS,...

Important: php

Issue Overview: The vulnerability allows a remote attacker to bypass implemented security restrictions. The vulnerability exists due to the way PHP handles HTTP variable names. A remote attacker can set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cook...

CVE-2024-35226 PHP Code Injection by malicious attribute in extends-tag in Smarty

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust template authors should update asap. Al...

PT-2024-12614 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.6 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted sessio...

Fedora: Security Advisory for rust-uu_uniq (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-resctl-demo (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-26421 · Unknown · Wp Booking

Name of the Vulnerable Software and Affected Versions: WP Booking versions prior to 2.4.5 Description: A cross-site scripting issue exists, allowing an arbitrary script to be executed on the user's web browser if exploited. Recommendations: For versions prior to 2.4.5, update to version 2.4.5 or...

Fedora: Security Advisory for rust-shellcheck-sarif (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-30609 · WordPress · The Spectra – Wordpress Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Spectra – WordPress Gutenberg Blocks plugin versions up to, and including, 2.13.0 Description: The issue is related to Stored Cross-Site Scripting via the block id parameter due to insufficient input sanitization and output escaping. This...

PT-2024-9386

Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions through 9.8.0.33 Description A flaw exists in the NuPoint Messenger NPM component of Mitel MiCollab due to inadequate sanitization of user-supplied data. This allows a remote, unauthenticated attacker to perform a SQL...