PT-2024-32482 · Vesoft · Vesoft Nebulagraph

Name of the Vulnerable Software and Affected Versions: vesoft NebulaGraph versions through 3.8.0 Description: An issue was discovered in vesoft NebulaGraph that allows shell command injection. Recommendations: For versions through 3.8.0, update to a version later than 3.8.0 to resolve the issue. ...

PT-2024-39296 · Riello · Riello Netman 204

Name of the Vulnerable Software and Affected Versions: Riello Netman 204 versions through 4.05 Description: The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device. Recommendations: For...

PT-2024-31651 · Unknown · Manu225 Flipping Cards

Name of the Vulnerable Software and Affected Versions: Manu225 Flipping Cards versions n/a through 1.30 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: Fo...

PT-2024-30775 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions through 3.102 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versio...

PT-2024-27312 · Sinatra · Sinatra

Name of the Vulnerable Software and Affected Versions: Sinatra versions through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions through...

CVE-2023-44151

Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1...

PT-2024-11688 · Unknown · Livebox Collaboration Vdesk

Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v018 Description: An issue allows a Bypass of Two-Factor Authentication under the "/login/backup code" endpoint and the "/api/v1/vdeskintegration/createbackupcodes" endpoint. This occurs because th...

PT-2024-26210 · Unyson · Unyson

Name of the Vulnerable Software and Affected Versions: Unyson versions through 2.7.29 Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

PT-2024-25386 · Unknown · Cusmin Absolutely Glamorous Custom Admin

Name of the Vulnerable Software and Affected Versions: Cusmin Absolutely Glamorous Custom Admin versions through 7.2.2 Description: A Server-Side Request Forgery SSRF issue affects the software, allowing unauthorized access to internal resources. This can lead to sensitive data exposure or other...

PT-2024-24645 · Unknown · Flector Easy Textillate

Name of the Vulnerable Software and Affected Versions: Flector Easy Textillate versions n/a through 2.02 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2024-23475 · Unknown · Nick Powers Social Author Bio

Name of the Vulnerable Software and Affected Versions: Nick Powers Social Author Bio versions n/a through 2.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Nick Powers Social Author Bio. Recommendations: For versions n/a through 2.4, update to...

PT-2024-24032 · Unknown · Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: ReDi Restaurant Reservation versions through 24.0128 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For...

PT-2024-24020 · Unknown · Apppresser

Name of the Vulnerable Software and Affected Versions: AppPresser versions through 4.3.0 Description: A Cross-Site Request Forgery CSRF issue affects AppPresser, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For versions through 4.3.0,...

PT-2024-24387 · Unknown · Kp4Coder Sync Post With Other Site

Name of the Vulnerable Software and Affected Versions: kp4coder Sync Post With Other Site versions n/a through 1.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in kp4coder Sync Post With Other Site. Recommendations: For versions...

CVE-2024-31308

Deserialization of Untrusted Data vulnerability in VJInfotech WP Import Export Lite.This issue affects WP Import Export Lite: from n/a through 3.9.26...

CVE-2024-30482

Cross-Site Request Forgery CSRF vulnerability in Brice CAPOBIANCO Simple Revisions Delete.This issue affects Simple Revisions Delete: from n/a through 1.5.3...

PT-2024-23439 · Unknown · Fg Prestashop To Woocommerce

Name of the Vulnerable Software and Affected Versions: FG PrestaShop to WooCommerce versions n/a through 4.45.1 Description: The issue is related to the insertion of sensitive information into log files. This can potentially expose confidential data. There is no information provided about the...

PT-2024-13806 · Wapppress · Wapppress

Name of the Vulnerable Software and Affected Versions: WappPress versions through 5.0.3 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects WappPress. This allows for the upload of files with potentially dangerous types without proper restriction...

PT-2024-20623 · WordPress · Wp Visitor Statistics

Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions through 6.9.4 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who...

PT-2024-21200 · Joomunited · Joomunited Wp Media Folder

Name of the Vulnerable Software and Affected Versions: JoomUnited WP Media folder versions n/a through 5.7.2 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in the JoomUnited WP Media folder. This vulnerability allows for the upload of files...