VMware Workstation Multiple Vulnerabilities (VMSA_2024_0010) - Windows

VMware Workstation is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation";...

PT-2024-18319 · WordPress · Embedpress

Name of the Vulnerable Software and Affected Versions: EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress versions up to, and including, 3.9.12 Description: The issue is related to insufficient...

PT-2024-33299 · WordPress · Wpb Elementor Addons

Name of the Vulnerable Software and Affected Versions: WPB Elementor Addons plugin for WordPress versions up to, and including, 1.0.9 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers wi...

PT-2024-27109 · WordPress · The Opal Estate Pro

Name of the Vulnerable Software and Affected Versions: The Opal Estate Pro – Property Management and Submission plugin for WordPress versions up to, and including, 1.7.6 Description: The issue is related to Stored Cross-Site Scripting via the agent latitude and longitude parameters due to...

KB Security Advisory EPM May 2024

Created Date May 21, 2024 4:07:53 PM...

PT-2024-40417 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.2.14 Description: The issue allows for the execution of unauthorized foreign code under certain circumstances, posing a critical security risk that could impact the entire system. Recommendations: For versions pri...

PT-2024-6480 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6537.0 Description: The issue is related to insufficient data validation in the Updater component of Google Chrome, allowing a remote attacker to perform privilege escalation via a malicious file...

PT-2024-11263 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.19.95 Description: A vulnerability in the Linux kernel has been resolved, which was triggered by a call to munlock pagevec to clear page LRU without lock page. This resulted in a kernel panic due to a BUG ON...

JVN#29471697: Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification

Android App "TP-Link Tether" and "TP-Link Tapo" provided by TP-LINK GLOBAL INC. are vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the application Update the...

PT-2024-22010 · WordPress · Contact Form Plugin By Fluent Forms

Name of the Vulnerable Software and Affected Versions: The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress versions up to, and including, 5.1.13 Description: The issue is related to Stored Cross-Site Scripting via form settings due to...

PT-2024-12046 · Vova Anokhin · Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: Shortcodes Ultimate versions n/a through 5.12.6 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows Absolute Path Traversal in Vova Anokhin Shortcod...

Mozilla Firefox Security Update (MFSA2024-21) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

PT-2024-25008 · Unknown · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro versions 1.1.12 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Booking Ultra Pro. Recommendations: For versions 1.1.12 and earlier, update to a version later...

Fuji Xerox / Fujifilm Printers CSRF Vulnerability (CVE-2024-22475)

Multiple Fuji Xerox / Fujifilm printers are prone to a cross-site request forgery CSRF vulnerability in the Web Based Management. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-1672)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-24902 · Unknown · Giveaways/Contests By Rafflepress

Name of the Vulnerable Software and Affected Versions: RafflePress Giveaways and Contests versions 1.12.7 and earlier Description: The issue is an Authentication Bypass by Spoofing vulnerability that allows Functionality Bypass. Recommendations: For versions 1.12.7 and earlier, update to a versio...

PT-2024-25888 · WordPress · Wordpress Meta Data/Taxonomies Filter

Name of the Vulnerable Software and Affected Versions: WordPress Meta Data and Taxonomies Filter MDTF versions 1.3.3.2 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, allowing Code Inclusion and Functionality Misuse. Recommendations: For WordPress Meta...

PT-2024-12660 · Phlox · Phlox

Name of the Vulnerable Software and Affected Versions: Shortcodes and extra features for Phlox theme versions n/a through 2.14.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability...

PT-2024-13470 · Wedevs · Wedevs Wp User Frontend

Name of the Vulnerable Software and Affected Versions: weDevs WP User Frontend versions 3.6.5 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in weDevs WP User Frontend. Recommendations: For versions 3.6.5 and earlier, update to a...

PT-2024-13054 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards based on IntelR 62X Chipset versions prior to 1.14 Description: The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable...