PT-2024-26996

Name of the Vulnerable Software and Affected Versions Newsletter Popup WordPress plugin versions prior to 1.2 Description The issue concerns a lack of CSRF check when deleting a list, which could allow attackers to perform actions via a CSRF attack, making logged-in admins delete lists without...

NuGet Package 'Microsoft.PowerBI.JavaScript' < 2.23.1 Information Disclosure

The remote host has a version of the NuGet Package 'Microsoft.PowerBI.JavaScript' that is prior to 2.23.1 It is, therefore, affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via user interaction, to disclose potentially sensitive informatio...

Intel Chipset Device Software Advisory - Lenovo Support US

No description provided...

PT-2024-18419 · Robotware · Robotware

Name of the Vulnerable Software and Affected Versions: RobotWare versions 6.00 through 6.15.05, except versions 6.10.10 and 6.13.07 RobotWare versions 7.00 through 7.13 Description: The issue allows an attacker to cause the robot to stop and make the robot controller inaccessible. It could...

PT-2024-31227 · WordPress · Sydney Toolbox

Name of the Vulnerable Software and Affected Versions: Sydney Toolbox plugin for WordPress versions up to, and including, 1.31 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the "aThemes: Portfolio" widget, allowing...

PT-2024-10057 · Intel · Intel Arc & Iris Xe Graphics

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics software versions prior to 31.0.101.5081 Description: The issue is related to improper neutralization in the graphics software, which may allow an unauthenticated user to potentially enable escalation of...

PT-2024-5181 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation ...

PT-2024-3750 · Unknown · Opupi0 Amqp/Mqtt

Name of the Vulnerable Software and Affected Versions: OPUPI0 AMQP/MQTT versions prior to V5.30 Description: A vulnerability has been identified that allows an attacker with remote shell access or physical access to retrieve credentials due to insufficient protection of stored MQTT client...

PT-2024-3543 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 2020 Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Adobe Acrobat 2020 Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability that could result in arbitrar...

Medium: cni-plugins

Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...

PT-2024-19730 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 Description: A correctness issue was addressed with improved checks, allowing an app to potentially read arbitrary files. Recommendations: For versions prior to 14.5, update to macOS Sonoma 14.5 to resolve...

Medium: python-pymongo

Issue Overview: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with...

Medium: ecs-init

Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...

Important: python3.11

Issue Overview: An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can r...

KLA67254 DoS vulnerability in Google Chrome

Out of bounds write vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products Google-Chrome CVE list...

PT-2024-26214 · Unknown · Webinarpress

Name of the Vulnerable Software and Affected Versions: WebinarPress versions 1.33.17 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

PT-2024-26222 · Unknown · Social Warfare

Name of the Vulnerable Software and Affected Versions: Social Warfare versions through 4.4.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated...

PT-2024-26210 · Unyson · Unyson

Name of the Vulnerable Software and Affected Versions: Unyson versions through 2.7.29 Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

PT-2024-24807 · Unknown · Wp Club Manager

Name of the Vulnerable Software and Affected Versions: WP Club Manager versions 2.2.11 and earlier Description: A Missing Authorization issue has been identified. Recommendations: For WP Club Manager versions 2.2.11 and earlier, update to a version later than 2.2.11 to resolve the issue...

PT-2024-24805 · WordPress · Schedulepress

Name of the Vulnerable Software and Affected Versions: SchedulePress versions 5.0.8 and earlier Description: A Missing Authorization issue has been identified. This issue affects the SchedulePress plugin, potentially allowing unauthorized access due to the lack of proper authorization checks...