PT-2024-22830 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station version 9.2.0-9289 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL...

PT-2024-22828 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station versions prior to 9.2.0-9289 Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as 'SQL...

KLA67585 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-06 · T.38 dissector crash Exploitation Public exploits exist for this vulnerability. CVE list CVE-2024-2955 critical Solution Update...

PT-2024-23240 · Unknown · Gs Pins For Pinterest

Name of the Vulnerable Software and Affected Versions: GS Pins for Pinterest versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For GS...

Important: apache-commons-compress

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

PT-2024-2340 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.11 Description: The issue is related to the use of dangerous methods or functions in the continuous integration and delivery CI/CD system, which may allow an attacker to escalate their privileges. Use...

PT-2024-22193 · Repute Infosystems · Armember

Name of the Vulnerable Software and Affected Versions: Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup versions through 4.0.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also kno...

Important: javapackages-bootstrap

Issue Overview: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. CVE-2024-25710 Affected Packages:...

HTTP/2 denial of service vulnerability in bundled Jetty

Jenkins bundles Winstone-Jetty, a wrapper around Jetty, to act as HTTP and servlet server when started using java -jar jenkins.war. This is how Jenkins is run when using any of the installers or packages, but not when run using servlet containers such as Tomcat. Jenkins 2.443 and earlier, LTS...

PT-2024-15247 · WordPress · System Dashboard

Name of the Vulnerable Software and Affected Versions: The System Dashboard WordPress plugin versions prior to 2.8.10 Description: The issue concerns a lack of sanitization and escaping of certain parameters in the plugin, which could allow administrators in multisite WordPress configurations to...

PT-2024-2921 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Path Traversal vulnerability in the web component of Ivanti Avalanche allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. The issue is related to incorrect...

PT-2024-2910 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability is caused by incorrect restriction of the directory path name with limit...

PT-2024-2908 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a use-after-free vulnerability in the WLAvalancheService component of the Ivanti Avalanche mobile device management system. This vulnerability is associated with th...

PT-2024-14816 · WordPress +1 · Advanced Page Visit Counter

Name of the Vulnerable Software and Affected Versions: The Advanced Page Visit Counter WordPress plugin versions prior to 8.0.6 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible even when the unfiltered html...

PT-2024-5872 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.13 Description: The issue is related to CSV injection, where an attacker can create an asset with a crafted title, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability o...

PT-2024-21417 · Cimg +3 · Cimg +3

Name of the Vulnerable Software and Affected Versions: Clmg versions prior to 3.3.3 Description: A heap-based buffer overflow can occur via a crafted file to cimg library::CImg:: load analyze. This issue allows for potential exploitation. Recommendations: For versions prior to 3.3.3, update to...

PT-2024-13383 · Epmm · Epmm

Name of the Vulnerable Software and Affected Versions: EPMM versions prior to 12.1.0.0 Description: The issue allows an authenticated user with appropriate privilege to access or modify data in the underlying database due to an SQL Injection vulnerability in the web component. Recommendations: Fo...

Driver Disk for Qlogic fastlinq 8.74.0.2 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 Cumulative Update 1 LTSR release who use Qlogic's fastlinq driver and wish to use the latest version of the following: Driver Module| Version ---|--- qed| 8.74.0.0 qede| 8.74.0.0 qedf| 8.74.0.2 qedi| 8.74.0.0 qedr|...

PT-2024-20493 · Zoom · Zoom Rooms Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows versions prior to 5.17.5 Description: The issue is related to improper access control in the installer, which may allow an authenticated user to conduct a denial of service via local access. Recommendations: For...

PT-2024-22505 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 14.3.0 Description: A Cross Site Scripting issue exists due to missing sanitization in the create tag function in admin/include/functions.php. Recommendations: For versions prior to 14.3.0, update to version 14.3.0 or...