PT-2024-23488 · Unknown · Add Shortcodes Actions/Filters

Name of the Vulnerable Software and Affected Versions: Add Shortcodes Actions And Filters versions prior to 2.10 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS. Specifically, it allows Reflected XSS...

PT-2024-23491 · Scientech It Solution · Appointment Calendar

Name of the Vulnerable Software and Affected Versions: Scientech It Solution Appointment Calendar versions through 2.9.6 Description: The issue affects the Appointment Calendar, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For...

PT-2024-23454 · Unknown · Easy Social Feed

Name of the Vulnerable Software and Affected Versions: Easy Social Feed versions n/a through 6.5.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Easy Social Feed. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

PT-2024-20337 · WordPress · The Ultimate Video Player

Name of the Vulnerable Software and Affected Versions: The Ultimate Video Player For WordPress versions prior to 2.2.3 Description: The issue is related to a lack of proper capability check when updating settings via a REST route, allowing users with Contributor and above roles to update them...

PT-2024-20395 · WordPress · Inline Related Posts

Name of the Vulnerable Software and Affected Versions: Inline Related Posts WordPress plugin versions prior to 3.5.0 Description: The issue concerns the Inline Related Posts WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high-privilege users,...

PT-2024-12798 · Themefusion · Fusion Builder

Name of the Vulnerable Software and Affected Versions: Fusion Builder versions prior to 3.11.2 Description: A Cross-Site Request Forgery CSRF issue affects the ThemeFusion Fusion Builder. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For version...

PT-2024-22828 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station versions prior to 9.2.0-9289 Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as 'SQL...

PT-2024-2450

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.2.1 Splunk Enterprise versions prior to 9.1.4 Splunk Enterprise versions prior to 9.0.9 Description The issue is related to the exposure of authentication tokens in Splunk Enterprise. This exposure can occ...

KLA67585 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-06 · T.38 dissector crash Related products Wireshark CVE list CVE-2024-2955 critical Solution Update to the latest version Download...

PT-2024-11724 · WordPress · Wordpress Countdown Widget

Name of the Vulnerable Software and Affected Versions: WordPress Countdown Widget versions 3.1.9.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS. This means an attacker could potentially trick a user into...

PT-2024-22830 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station version 9.2.0-9289 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL...

PT-2024-17933 · Grafana · Grafana

Name of the Vulnerable Software and Affected Versions: Countdown Timer for Elementor WordPress plugin versions prior to 1.3.7 Description: The issue concerns the Countdown Timer for Elementor WordPress plugin, where versions prior to 1.3.7 do not properly sanitise and escape some parameters when...

PT-2024-23240 · Unknown · Gs Pins For Pinterest

Name of the Vulnerable Software and Affected Versions: GS Pins for Pinterest versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For GS...

Important: apache-commons-compress

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

PT-2024-22193 · Repute Infosystems · Armember

Name of the Vulnerable Software and Affected Versions: Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup versions through 4.0.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also kno...

Important: javapackages-bootstrap

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

PT-2024-2340 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.11 Description: The issue is related to the use of dangerous methods or functions in the continuous integration and delivery CI/CD system, which may allow an attacker to escalate their privileges. Use...

PT-2024-15247 · WordPress · System Dashboard

Name of the Vulnerable Software and Affected Versions: The System Dashboard WordPress plugin versions prior to 2.8.10 Description: The issue concerns a lack of sanitization and escaping of certain parameters in the plugin, which could allow administrators in multisite WordPress configurations to...

PT-2024-2908 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a use-after-free vulnerability in the WLAvalancheService component of the Ivanti Avalanche mobile device management system. This vulnerability is associated with th...

PT-2024-2921 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Path Traversal vulnerability in the web component of Ivanti Avalanche allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. The issue is related to incorrect...