PT-2024-2733 · Intel · Intel Killer Wi-Fi +1

Name of the Vulnerable Software and Affected Versions: Intel PROSet/Wireless and Intel Killer Wi-Fi software versions prior to 22.240 Description: The issue is related to insufficient adherence to expected conventions in some Intel PROSet/Wireless and Intel Killer Wi-Fi software, which may allow ...

PT-2024-2661 · Siemens · Solid Edge +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V35.0.263 Parasolid versions prior to V35.1.252 Parasolid versions prior to V36.0.198 Solid Edge SE2023 versions prior to V223.0 Update 11 Solid Edge SE2024 versions prior to V224.0 Update 3 Description: The issue ...

PT-2024-1758 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.1 and earlier Description: The issue is related to a buffer overflow operation in the memory of the Adobe Substance 3D Painter program, which can allow an attacker to execute arbitrary code. Exploitation of...

PT-2024-17130 · WordPress · Bold Page Builder

Name of the Vulnerable Software and Affected Versions: The Bold Page Builder plugin for WordPress versions up to, and including, 4.8.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Icon Link due to insufficient input sanitization and output escaping. This allow...

CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

PT-2024-20748

Name of the Vulnerable Software and Affected Versions WP Swings Coupon Referral Program versions 1.7.2 and earlier Description The issue is related to Deserialization of Untrusted Data in WP Swings Coupon Referral Program. This can potentially lead to exploitation. No information is provided abou...

PT-2024-2333

Name of the Vulnerable Software and Affected Versions Bricks Builder versions 1.9.6 and earlier Description A critical remote code execution vulnerability in Bricks Builder, a WordPress site builder, allows unauthenticated attackers to execute arbitrary PHP code on vulnerable installations. This...

UBUNTU-CVE-2024-24821

Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the invocation of Composer and in the context of the executing user. As such, under certain conditions arbitrary code execution may lead to local...

CVE-2024-25107 Cross-Site Scripting in WikiDiscover

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the Language::date function is used when making the human-readable timestamp for inclusion on the wikicreation column. This function uses interface messages to translate the nam...

PT-2024-20633 · Unknown · Wonder Slider Lite

Name of the Vulnerable Software and Affected Versions: Wonder Slider Lite versions through 13.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS. Recommendations: For versions through...

PT-2024-1609 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.160 Description: The issue is related to a use after free in Mojo, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code...

Important: python-pillow

Issue Overview: Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter. CVE-2023-50447 Affected Packages: python-pillow Issue Correction: Run dnf update...

PT-2024-15624 · Themeisle · Orbit Fox

Name of the Vulnerable Software and Affected Versions: The Orbit Fox by ThemeIsle plugin for WordPress versions up to, and including, 2.10.27 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Pricing Table Elementor Widget due to insufficient input sanitization and...

PT-2024-18732 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.63.6 Description: The issue allows local attackers to access sensitive information via implicit intent due to an implicit intent hijacking vulnerability in the In-App Purchase IAP component of the Galaxy...

PT-2024-15753 · WordPress · Filebird

Name of the Vulnerable Software and Affected Versions: FileBird plugin for WordPress versions up to, and including, 5.5.8.1 Description: The issue is related to Stored Cross-Site Scripting via imported folder titles due to insufficient input sanitization and output escaping. This allows...

QNAP QuTS hero Multiple Vulnerabilities (QSA-23-30, QSA-23-47)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS hero Multiple Vulnerabilities (QSA-23-33)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

Medium: containerd

Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...

Important: kernel-livepatch-4.14.334-252.552

Issue Overview: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable...

QNAP QuTScloud c5.x < c5.1.5.2651 Multiple Vulnerabilities

QNAP QuTScloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud"; ifdescripti...