PT-2024-39498 · WordPress · Wordpress Social Share Buttons

Name of the Vulnerable Software and Affected Versions: WordPress Social Share Buttons plugin versions up to, and including, 1.19 Description: The WordPress Social Share Buttons plugin is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on t...

PT-2025-8840

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc6+ Description A vulnerability in the Linux kernel has been identified, specifically in the nvkm module. The issue arises when handling large RPC requests, where the r535 gsp cmdq push function waits for...

PT-2024-30992 · Apple · Itunes +1

Name of the Vulnerable Software and Affected Versions: Apple TV versions prior to 1.5.0.152 iTunes versions prior to 12.13.3 Description: A stack buffer overflow issue was addressed through improved input validation. Parsing a maliciously crafted video file may lead to unexpected system...

PT-2024-39688 · Blubrry · Powerpress Podcasting Plugin

Name of the Vulnerable Software and Affected Versions: PowerPress Podcasting plugin by Blubrry plugin for WordPress versions up to, and including, 11.9.18 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'skipto' shortcode due to insufficient input sanitization an...

PT-2024-7511 · Nginx · Nginx-Ui

Name of the Vulnerable Software and Affected Versions: Nginx UI versions 2.0.0-beta.35 and earlier Description: The issue is related to the Nginx UI's handling of JSON fields without proper verification, allowing an attacker to construct a value in the form of ../../ and write arbitrary files to...

PT-2024-10171 · Unknown · License Center

Name of the Vulnerable Software and Affected Versions: License Center versions prior to 1.9.43 Description: A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. This issue is relat...

PT-2024-39065 · WordPress · Qa Analytics – Web Analytics Tool With Heatmaps & Session Replay Across All Pages

Name of the Vulnerable Software and Affected Versions: QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress versions up to, and including, 4.1.0.0 Description: The issue is related to a missing capability check on the ajax save plugin config...

PowerDNS Recursor DoS Vulnerability (2024-04)

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2024-32562 · Chartify · Chartify

Name of the Vulnerable Software and Affected Versions: Chartify versions n/a through 2.7.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, which leads to Reflected XSS. This problem allows for Cross-site Scripting, where an attacker can inject...

PT-2024-32597 · Unknown · Web Directory Free

Name of the Vulnerable Software and Affected Versions: Web Directory Free versions 1.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. Recommendations: For versions...

PT-2024-31026 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: iTunes versions prior to 12.13.3 Description: A logic issue was addressed with improved restrictions, which could allow a local attacker to elevate their privileges. The issue is related to a local privilege escalation vulnerability...

PT-2024-39206 · WordPress · Dk Pdf Plugin

Name of the Vulnerable Software and Affected Versions: DK PDF plugin for WordPress versions up to, and including, 1.9.6 Description: The DK PDF plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This makes ...

PT-2024-38967

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to and including 3.16.1 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection due to the deserialization of...

PT-2024-32278 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: WhatsUp Gold versions prior to 2024.0.1 Description: A SQL Injection vulnerability allows an authenticated low-privileged user with at least Report Viewer permissions to achieve privilege escalation to the admin account. Recommendations: For...

PT-2024-38080 · National Keep Cyber Security Services · Cybermath

Name of the Vulnerable Software and Affected Versions: CyberMath versions before CYBM.240816253 Description: The issue affects National Keep Cyber Security Services' CyberMath, allowing external parties to access files or directories and collect data from common resource locations. Recommendation...

PT-2024-9622

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description The issue is related to a function qtdemux parse samples in the GStreamer multimedia framework, which is associated with an out-of-bounds read in memory. This can be exploited by a remote attacke...

PT-2024-39057 · Franklin Fueling Systems · Ts-550 Evo

Name of the Vulnerable Software and Affected Versions: Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 Description: The issue allows an attacker to read a file arbitrarily, potentially obtaining administrator credentials. Recommendations: For Franklin Fueling Systems TS-550 EVO...

PT-2024-30367 · Planet Fitness · Planet Fitness Workouts

Name of the Vulnerable Software and Affected Versions: The Planet Fitness Workouts iOS and Android mobile apps versions prior to 9.8.12 Description: The issue is related to the failure of the Planet Fitness Workouts iOS and Android mobile apps to properly validate TLS certificates. This allows an...

PT-2024-6626 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.44799 Description: The issue is related to insufficient protection of registration data in JetBrains YouTrack, allowing a remote attacker to gain unauthorized access to protected information. The...

PT-2024-38064 · Semtek · Sempos

Name of the Vulnerable Software and Affected Versions: Semtek Sempos versions through 31072024 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows unauthorized database access...