PT-2024-36447 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability in the /admin/delete subject.php endpoint. This vulnerability allows for potential exploitation by injecting malicious SQL code...

PT-2024-13500 · Themewinter · Wpcafe

Name of the Vulnerable Software and Affected Versions: WPCafe versions through 2.2.22 Description: The issue is related to a Missing Authorization vulnerability in Themewinter WPCafe, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

PT-2024-13504 · Ncrafts · Formcraft

Name of the Vulnerable Software and Affected Versions: nCrafts FormCraft versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.2.7 and...

PT-2024-36448 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-Learning Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability in the /admin/delete student.php endpoint. This vulnerability allows for potential exploitation. Recommendations: For Kashipara...

PT-2024-13810 · Unknown · Registrationmagic

Name of the Vulnerable Software and Affected Versions: RegistrationMagic versions 5.2.3.0 and earlier Description: The issue is related to a missing authorization vulnerability in Metagauss User Registration Forms RegistrationMagic, which allows the exploitation of incorrectly configured access...

PT-2024-36975

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to an invalid access to prog array in perf event detach bpf prog. A crash occurs when a tracepoint perf event with attr.inherit=1 is created, attached to a process, and a b...

PostgreSQL: Multiple Vulnerabilities

Background PostgreSQL is an open source object-relational database management system. Description Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaroun...

Spidermonkey: Multiple Vulnerabilities

Background SpiderMonkey is Mozilla’s JavaScript and WebAssembly Engine, used in Firefox, Servo and various other projects. It is written in C++, Rust and JavaScript. You can embed it into C++ and Rust projects, and it can be run as a stand-alone shell. Description Multiple vulnerabilities have be...

Asterisk: Multiple Vulnerabilities

Background Asterisk is an open source telephony engine and toolkit. Description Multiple vulnerabilities have been discovered in Asterisk. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

Image Preparation fails using MCS on GCP due to Google's deprecated images disk export workflow

Symptoms or Error Customers cannot create new catalogs or update the images of existing catalogs. Solution Citrix is currently working on a fix. Workaround: Customers can update the json files to use a newer image and script.Below is the step-by-step process. There are 2 options to update the...

R: Arbitrary Code Execution

Background R is a language and environment for statistical computing and graphics. Description Deserialization of untrusted data can occur in the R statistical programming language, enabling a maliciously crafted RDS R Data Serialization formatted file or R package to run arbitrary code on an end...

Cacti: Multiple Vulnerabilities

Background Cacti is a web-based network graphing and reporting tool. Description Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

OpenJDK: Multiple Vulnerabilities

Background OpenJDK is an open source implementation of the Java programming language. Description Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

Mozilla Firefox: Multiple Vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

Mozilla Thunderbird: Multiple Vulnerabilities

Background Mozilla Thunderbird is a popular open-source email client from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

PT-2024-17397 · WordPress · Wp System

Name of the Vulnerable Software and Affected Versions: WP System plugin for WordPress versions up to, and including, 1.1.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the generate wp system page content function. This allows...

PT-2024-36082 · Unknown · Paloma Widget

Name of the Vulnerable Software and Affected Versions: Paloma Widget versions 1.14 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Paloma Widget, allowing unauthorized requests. This can lead to malicious actions being performed on behalf of the user. Recommendations:...

PT-2024-17422 · WordPress · Wp Media Optimizer (.Webp) Plugin

Name of the Vulnerable Software and Affected Versions: WP Media Optimizer .webp plugin for WordPress versions up to, and including, 1.4.0 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

PT-2024-36411

Name of the Vulnerable Software and Affected Versions WAVLINK WN531P3 version 202383 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with elevated privileges. Recommendations F...

PT-2024-36094

Name of the Vulnerable Software and Affected Versions: ARForms versions n/a through 6.4.1 Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which affects Repute InfoSystems ARForms. This allows for Path Traversal. Recommendations: For...