PT-2024-30985 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions, which may have allowed an app to access protected user data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to...

PT-2024-29050 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. A malicious app may be able to change network settings. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolve t...

PT-2024-7437

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15 Description A security issue exists in macOS related to deficiencies in access control. Exploitation of this issue may allow an attacker to bypass privacy settings. Microsoft discovered this flaw, dubbed "HM...

PT-2024-39161 · WordPress · Wp Simple Booking Calendar

Name of the Vulnerable Software and Affected Versions: WP Simple Booking Calendar plugin for WordPress versions up to, and including, 2.0.10 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without appropriate escaping on the...

PT-2024-32775

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved, which could lead to memory leaks. The issue is related to the bpf helpers that had ARG PTR TO LONG,INT as input arguments. In case of an...

PT-2024-39183 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.34.2 Description: A remote code execution RCE vulnerability exists via crafted extension publisher-url/additional-urls that could be abused by a malicious extension. This issue can be exploited to execute co...

PT-2024-35361

Name of the Vulnerable Software and Affected Versions GNOME libsoup versions prior to 3.6.1 Description The issue is related to an infinite loop and memory consumption during the reading of certain patterns of WebSocket data from clients. Recommendations For versions prior to 3.6.1, update to...

PT-2024-29881 · Siemens · Sinema Remote Connect Client

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Client versions prior to V3.2 SP2 Description: A vulnerability has been identified where the affected application inserts sensitive information into a log file. This log file is readable by all legitimate users of the...

Fedora: Security Advisory (FEDORA-2023-1afa208698)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-33)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

KLA73914 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-10 · SPRT dissector cras Exploitation Related products Wireshark CVE list CVE-2024-8645 warning Solution Update to the latest versio...

PT-2024-6586 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to insufficient server-side controls in the management console of Ivanti Workspace Control, which can be exploited by a local authenticated attacker to...

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-32)

QNAP QuTS hero is prone to multiple OS command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPESBUX04685 rev.1 - HPE HP-UX 11i v3 ONC and NFS Software, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i v3 ONC and NFS Software - Prior to B.11.31.24 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-1999-0195 |...

PT-2024-39079 · WordPress · The Big File Uploads – Increase Maximum File Upload Size

Name of the Vulnerable Software and Affected Versions: The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress versions up to, and including, 2.1.2 Description: The plugin is vulnerable to Full Path Disclosure due to not sanitizing a file path in an error message. This allow...

PT-2024-5949 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.5.4.2790 build 20240605 QuTS hero versions prior to h4.5.4.2626 build 20231225 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the...

PT-2024-12487 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 4.5.4.2790 build 20240605 QNAP QuTS hero versions prior to h4.5.4.2790 build 20240606 Description: An OS command injection issue has been reported to affect several QNAP operating system versions. If exploited, the...

PT-2024-19115 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.6.2722 build 20240402 QNAP QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If...

PT-2024-31626 · Unknown · Advanced Custom Fields Pro

Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields versions 6.3.5 and earlier Advanced Custom Fields Pro versions 6.3.5 and earlier Description: A cross-site scripting issue exists, allowing an attacker with the capability setting privilege to store an arbitrary script ...

Google Chrome Security Update (stable-channel-update-for-desktop-2024-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...