PT-2024-1881 · Intel · Intel Ssu

Name of the Vulnerable Software and Affected Versions: IntelR SSU versions prior to 3.0.0.2 Description: The issue is related to an uncontrolled search path element in the Intel System Support Utility. This could allow an authenticated user to potentially enable escalation of privilege via local...

PT-2024-14874 · Trellix · Trellix Central Management

Name of the Vulnerable Software and Affected Versions: Trellix Central Management versions prior to 9.1.3.97129 Description: A cross-site scripting issue allows a remote authenticated attacker to craft internal requests to the CM dashboard, causing arbitrary content to be injected into the respon...

PT-2024-2705 · Intel · Intel Chipset Driver

Name of the Vulnerable Software and Affected Versions: IntelR Chipset Driver Software versions prior to 10.1.19444.8378 Description: The issue is related to incorrect default permissions in some IntelR Chipset Driver Software, which may allow an authenticated user to potentially enable escalation...

PT-2024-14986

Name of the Vulnerable Software and Affected Versions MİA-MED versions prior to 1.0.7 Description The issue is related to the exposure of sensitive information due to incompatible policies, allowing the collection of data as provided by users. Recommendations For versions prior to 1.0.7, update t...

PT-2024-1694 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2023.3.3 Description: The issue exists due to insufficient input validation in the authentication token handler component of the integrated development environment. This could allow a remote attacker ...

PT-2024-1689 · Libgit2 +5 · Libgit2 +5

Name of the Vulnerable Software and Affected Versions: libgit2 versions prior to 1.6.5 libgit2 versions prior to 1.7.2 Description: The issue is related to a heap corruption vulnerability in the has dir name function in src/libgit2/index.c, which can be exploited for arbitrary code execution. Thi...

PT-2024-1574 · Google +5 · Skia +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.160 Description: The issue is related to a heap buffer overflow in the Skia graphics library of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page,...

PT-2024-15159 · 10Web · 10Web Ai Assistant

Name of the Vulnerable Software and Affected Versions: 10Web AI Assistant versions up to, and including, 1.0.18 Description: The issue allows authenticated attackers with subscriber-level access and above to install arbitrary plugins, potentially gaining further access to a compromised site. This...

PT-2024-6574 · Cyberpower · Cyberpower Powerpanel Enterprise

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel Enterprise versions prior to 2.8.3 Description: A sql injection vulnerability exists in the query ptask lean function within MCUDBHelper, allowing an unauthenticated remote attacker to leak sensitive information. The...

CVE-2024-23841 XSS in @apollo/experimental-nextjs-app-support

apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this vulnerability, an attacker would need to either inject malicious input e.g. by redirecting...

PT-2024-9530 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 10.2.0 through 10.2.1 Drupal Core versions 10.1.0 through 10.1.7 Description: A vulnerability in Drupal Core allows Excessive Allocation, which can be exploited to trigger a denial of service DOS. The issue affects certai...

PT-2024-15114 · WordPress · Slick Social Share Buttons

Name of the Vulnerable Software and Affected Versions: Slick Social Share Buttons plugin for WordPress versions up to, and including, 2.4.11 Description: The issue allows unauthorized modification of data due to a missing capability check on the dcssb ajax update function. This makes it possible...

PT-2024-15103 · WordPress · Formidable Forms

Name of the Vulnerable Software and Affected Versions: Formidable Forms plugin for WordPress versions up to, and including, 6.7 Description: The Formidable Forms plugin for WordPress is vulnerable to HTML injection. This issue allows unauthenticated users to inject arbitrary HTML code into form...

PT-2024-18713 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.90.16 Description: The issue allows a local attacker to obtain sensitive information due to an implicit intent hijacking vulnerability. Recommendations: For versions prior to 6.1.90.16, update to version...

PT-2024-15160 · WordPress · Embedpress

Name of the Vulnerable Software and Affected Versions: EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress versions up to 3.9.5 exclusive Description: The issue is related to Stored Cross-Site Scripting via...

PT-2024-14921 · WordPress · Backup Migration

Name of the Vulnerable Software and Affected Versions: Backup Migration WordPress plugin versions prior to 1.3.6 Description: The issue allows attackers to potentially leak sensitive information from a site's backups by monitoring publicly accessible files that store in-progress backups...

PT-2023-27343 · Pexip · Pexip Vmr

Name of the Vulnerable Software and Affected Versions: Pexip VMR self-service portal versions prior to 3 Description: The issue allows authentication bypass due to the use of the same SSH host key across different customers' installations. Recommendations: For versions prior to 3, update to versi...

PT-2023-31868 · Hertzbeat · Hertzbeat

Name of the Vulnerable Software and Affected Versions: Hertzbeat versions prior to 1.4.1 Description: Hertzbeat is an open source, real-time monitoring system. Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces, potentially resulting in the...

PT-2023-31658 · Accredible · Accredible Certificates & Open Badges

Name of the Vulnerable Software and Affected Versions: Accredible Certificates & Open Badges versions 1.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2023-31833 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 4.11.0 Description: The issue concerns a vulnerability in the /file route of Gradio, making it susceptible to file traversal attacks. An attacker could access arbitrary files on a machine running a Gradio app with a...