PT-2024-15512 · WordPress · The Ai Engine: Chatbots

Name of the Vulnerable Software and Affected Versions: The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress versions up to, and including, 2.2.0 Description: The issue is related to Stored Cross-Site Scripting via the AI chat data when discussion tracking is...

HelpDeskZ Cross-Site Scripting Vulnerability

HelpDeskZ is a free PHP-based software that allows you to manage your site's support using a web-based support ticket system. Provides quality support. A cross-site scripting vulnerability exists in HelpDeskZ 2.0.2 and prior versions, which stems from the presence of a cross-site scripting XSS...

CVE-2024-26559

An issue in uverif v.2.0 allows a remote attacker to obtain sensitive information...

Md1health Md1patient Security Breach

Md1health Md1patient is a medical software from Md1health. A security vulnerability exists in Md1health Md1patient version v2.0.0, which stems from the presence of a cross-site scripting XSS vulnerability that could allow an attacker to execute arbitrary web script or HTML via a specially crafted...

WordPress Plugin Page Restrict Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-21422 · Uverif · Uverif

Name of the Vulnerable Software and Affected Versions: uverif version 2.0 Description: An issue in the software allows a remote attacker to obtain sensitive information. Recommendations: For uverif version 2.0, at the moment, there is no information about a newer version that contains a fix for...

uverif Security Vulnerabilities

uverif is a free and open source web authentication management system from uverif. A security vulnerability exists in uverif version v.2.0, which stems from the presence of a sensitive information disclosure vulnerability...

Ctcms Code Issues Vulnerabilities

Ctcms 赤兔cms is a video content management system from China's Red Rabbit Cms Ctcms company. Ctcms version 2.1.2 has a code issue vulnerability, the vulnerability stems from the file ctcms/apps/controllers/admin/Upsys.php has a file upload vulnerability...

GHSA-RGGV-CV7R-MW98 Connection leaking on idle timeout when TCP congested

Impact If an HTTP/2 connection gets TCP congested, when an idle timeout occurs the HTTP/2 session is marked as closed, and then a GOAWAY frame is queued to be written. However it is not written because the connection is TCP congested. When another idle timeout period elapses, it is then supposed ...

AZL-35449 CVE-2024-26455 affecting package fluent-bit for versions less than 2.2.3-1

fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/customcalyptia/calyptia.c...

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version 2.33, which stems from an unrestricted upload of dangerously typed files allowed in updatesetting.php...

CVE-2024-24309

In the module "Survey TMA" ecomizsurveytma up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download personal information without restriction...

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/deleteplace.php...

PT-2024-18274 · Unknown · Bdtask Bhojon Best Restaurant Management

Name of the Vulnerable Software and Affected Versions: Bdtask Bhojon Best Restaurant Management Software version 2.9 Description: A problematic issue has been found in the software, affecting the processing of the file /dashboard/message of the component Message Page. The manipulation of the...

Netis WF2780 Security Vulnerability

The Netis WF2780 is a networking device from Netis. Provides AC routers to deliver next generation Wi-Fi at gigabit speeds. A security vulnerability exists in Netis WF2780 version v2.1.40144, which stems from a command injection vulnerability via the configsequence parameter in otherpara...

flusity CMS Security Vulnerability

flusity CMS is a user-interactive interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML...

flusity CMS Security Vulnerability

flusity CMS is a user-interactive interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML...

PT-2024-20809 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions Description: A NULL pointer dereference issue was discovered via the isCurrent function at /src/layered costmap.cpp. This issue affects the navigation capabilities of the...

PT-2024-19797 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 2.5.0 through Master Branch ab0ee111 Description: An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality. A specially crafted .vmrk file can lead to arbitrary code execution. An attacker...

PT-2024-17837

Name of the Vulnerable Software and Affected Versions Loomio version 2.22.0 Description The issue allows executing arbitrary commands on the server due to the application being vulnerable to OS Command Injection. Recommendations For Loomio version 2.22.0, update to a version that fixes the OS...