417722 matches found
PT-2026-36801
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.67 Description An out-of-bounds read issue exists in the mod proxy ajp module of Apache HTTP Server, specifically within AJP getter functions. This flaw allows a remote attacker to read memory outside t...
PT-2025-43588
Name of the Vulnerable Software and Affected Versions Microsoft Azure Storage for WordPress plugin for WordPress versions up to and including 4.5.1 Description The software is susceptible to unauthorized arbitrary media deletion. This is a result of missing capability checks on the...
PT-2025-37458
Name of the Vulnerable Software and Affected Versions: 1Panel-dev MaxKB versions up to 2.0.2 and 2.1.0 Description: A vulnerability exists in 1Panel-dev MaxKB due to improper processing of files. Specifically, the file /admin/api/workspace/default/tool/debug is susceptible to manipulation of the...
PT-2026-21992
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One Console affected versions not specified Description The Trend Micro Apex One Console is susceptible to a directory traversal issue that could lead to remote code execution. The issue allows an attacker to potentially gain...
PT-2025-30449
Name of the Vulnerable Software and Affected Versions Ollama version 0.6.7 Description A cross-domain token exposure exists in the server.auth.getAuthorizationToken function. This allows remote attackers to steal authentication tokens and bypass access controls by exploiting a malicious realm val...
PT-2025-28953 ยท Undefined ยท Undefined
ะ ะตัะตะฝะธั Ruckus Wireless Virtual SmartZone vSZ ะธ Network Director RND ะฟะพะดะฒะตัะถะตะฝั ะผะฝะพะณะพัะธัะปะตะฝะฝัะผ ััะทะฒะธะผะพัััะผ, ะบะพัะพััะต ะผะพะณัั ะฟะพะทะฒะพะปะธัั ะทะปะพัะผััะปะตะฝะฝะธะบะฐะผ ัะบะพะผะฟัะพะผะตัะธัะพะฒะฐัั ัะฟัะฐะฒะปัะตะผัะต ััะตะดั, ะพััะฐะฒะฐััั ะฟัะธ ััะพะผ ะฝะตะธัะฟัะฐะฒะปะตะฝะฝัะผะธ ะดะพ ะฝะฐััะพััะตะณะพ ะฒัะตะผะตะฝะธ. Ruckus Wireless Ruckus Networks ัะตะฐะปะธะทัะตั ัะธัะพะบัั...
PT-2025-27799 ยท Plesk ยท Plesk Obsidian
Name of the Vulnerable Software and Affected Versions: Plesk Obsidian version 18.0.69 Description: The issue allows unauthenticated requests to the "/login up.php" API endpoint to reveal sensitive AWS credentials, including accessKeyId, secretAccessKey, region, and endpoint. Recommendations: For...
PT-2025-25154 ยท Adobe ยท Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A reflected Cross-Site Scripting XSS issue affects the software. If an attacker convinces a victim to visit a URL referencing a vulnerable page, malicious JavaScript content ma...
PT-2025-16276
Name of the Vulnerable Software and Affected Versions ZHENFENG13/code-projects My-Blog-layui version 1.0 Description A critical vulnerability affects the file upload function of the /admin/upload/authorImg/ endpoint. The manipulation of the File argument leads to unrestricted file upload. The...
PT-2025-1819 ยท WordPress ยท Wp Database Backup
Name of the Vulnerable Software and Affected Versions: WP Database Backup โ Unlimited Database & Files Backup by Backup for WP plugin for WordPress versions up to, and including, 7.3 Description: The issue allows unauthenticated attackers to extract sensitive data, including all information store...
PT-2024-33385 ยท WordPress ยท Buddypress Better Registration
Name of the Vulnerable Software and Affected Versions: BuddyPress Better Registration versions 1.6 and earlier BuddyPress Better Registration version 1.7 is not affected, as it contains the fix for the issue. Description: The issue is an Authentication Bypass Using an Alternate Path or Channel...
PT-2024-31991 ยท Mecha Cms ยท Mecha Cms
Name of the Vulnerable Software and Affected Versions: Mecha CMS version 3.0.0 Description: The issue allows an attacker to construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the deletion of arbitrary files or website...
PT-2024-27537 ยท Electrolink ยท Electrolink Transmitters
Name of the Vulnerable Software and Affected Versions: Electrolink transmitters affected versions not specified Description: The issue concerns Electrolink transmitters storing credentials in clear-text, which could allow an attacker to access the system using these credentials. Recommendations: ...
PT-2024-24393 ยท Seedprod ยท Seedprod Coming Soon Page
Name of the Vulnerable Software and Affected Versions: SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd versions through 6.15.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user int...
PT-2024-19655
Name of the Vulnerable Software and Affected Versions JFreeChart version 1.5.4 Description A potential issue was discovered in JFreeChart, related to an ArrayIndexOutOfBounds condition via the component /chart/plot/CompassPlot.java. However, the existence of this issue is disputed by multiple thi...
PT-2024-3456 ยท Phpย +1 ยท Phpย +1
Name of the Vulnerable Software and Affected Versions: Cacti versions 1.3.x Description: A command injection vulnerability allows any unauthenticated user to execute arbitrary commands on the server when the register argc argv option of PHP is On. The vulnerability is located in cmd realtime.php...
PT-2024-18358 ยท Dassault Systรจmes ยท Dassault Systรจmes Edrawings
Name of the Vulnerable Software and Affected Versions: Dassault Systรจmes eDrawings affected versions not specified Description: The issue allows remote code execution via various file parsing vulnerabilities, including heap-based buffer overflow, memory corruption, out-of-bounds read, out-of-boun...
PT-2024-14104 ยท Snakeyamlย +1 ยท Snakeyamlย +1
Name of the Vulnerable Software and Affected Versions: Hertzbeat versions prior to 1.4.1 Description: Hertzbeat is a real-time monitoring system. At the interface of "/define/yml", SnakeYAML is used as a parser to parse yml content, but no security configuration is used, resulting in a YAML...
PT-2023-29931 ยท Mybbย +1 ยท Mybbย +1
Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.37 Description: The issue arises from custom MyCode BBCode for the visual editor SCEditor not escaping input properly when rendering HTML, resulting in a DOM-based XSS vulnerability. This weakness can be exploited b...
PT-2023-11494 ยท Binaryen ยท Binaryen
Name of the Vulnerable Software and Affected Versions: Binaryen version 1.38.26 Description: A heap-buffer-overflow issue exists in the wasm::WasmBinaryBuilder::visitBlockwasm::Block function in src/wasm/wasm-binary.cpp. This can be triggered by a crafted wasm input, leading to a segmentation fau...
PT-2023-25413 ยท WordPress ยท Simple Author Box
Name of the Vulnerable Software and Affected Versions: The Simple Author Box WordPress plugin versions prior to 2.52 Description: The issue is related to the disclosure of arbitrary user information due to a lack of verification of the user ID before outputting information about that user. This c...
PT-2023-19831 ยท WordPress ยท Stop Spammers Security
Name of the Vulnerable Software and Affected Versions: The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin versions prior to 2023 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because various parameters are not properly...
PT-2022-11568 ยท Elan ยท Elan Miniport Touchpad Windows Driver
Name of the Vulnerable Software and Affected Versions: ELAN Miniport touchpad Windows driver versions prior to 24.21.51.2 Description: The issue allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. This is related to the handling of...
PT-2022-19289 ยท F Secureย +1 ยท F-Secureย +1
Name of the Vulnerable Software and Affected Versions: F-Secure and WithSecure products affected versions not specified Description: A Denial-of-Service issue was found where the aerdl.dll may enter an infinite loop when unpacking PE files, potentially causing the scanning engine to crash...
PT-2026-34859
Name of the Vulnerable Software and Affected Versions Delta Electronics AS320T affected versions not specified Description The device fails to verify the length of the buffer used for the directory name, which may lead to a buffer overflow a condition where a program writes more data to a storage...
PT-2022-12288 ยท Plesk ยท Plesk Cms
Name of the Vulnerable Software and Affected Versions: Plesk CMS version 18.0.37 Description: The issue is related to an insecure permissions vulnerability that allows privilege escalation from user to admin rights. According to the vendor, this is a site-specific problem affecting websites of on...
PT-2021-16026 ยท WordPress ยท Wplms
Name of the Vulnerable Software and Affected Versions: The WP LMS โ Best WordPress LMS Plugin versions 1.1.2 and earlier Description: The issue arises from the plugin's failure to properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Additionally, the lack ...
PT-2020-14874 ยท Razer ยท Razer Chroma Sdk Rest Server
Name of the Vulnerable Software and Affected Versions: Razer Chroma SDK Rest Server versions 3.12.17 and earlier Description: The issue allows remote attackers to execute arbitrary programs due to a race condition. This condition occurs when a file created under "%PROGRAMDATA%Razer ChromaSDKApps"...
PT-2019-15858 ยท Alfresco ยท Alfresco Enterprise
Name of the Vulnerable Software and Affected Versions: Alfresco Enterprise versions prior to 5.2.5 Description: The issue allows for stored XSS via an uploaded HTML document. This means an attacker can upload a malicious HTML file to the system, which can then execute scripts on the user's browse...
PT-2019-4415 ยท Linuxย +2 ยท Linux Kernelย +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.6 Description: A memory leak in the nfp abm u32 knode replace function in drivers/net/ethernet/netronome/nfp/abm/cls.c allows attackers to cause a denial of service memory consumption. The issue has been...
PT-2018-4220 ยท F5 ยท F5 Big-Ip
Name of the Vulnerable Software and Affected Versions: F5 BIG-IP systems versions 10.x through 10.2.4 before HF9 F5 BIG-IP systems versions 11.x through 11.2.1 before HF12 F5 BIG-IP systems version 11.3.0 before HF10 F5 BIG-IP systems version 11.4.0 before HF8 F5 BIG-IP systems version 11.4.1...
PT-2012-5947
Name of the Vulnerable Software and Affected Versions Java Open Single Sign-On Project Home JOSSO affected versions not specified Description The issue allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, also known as a "Signatu...
PT-2012-5811
Name of the Vulnerable Software and Affected Versions OSClass versions prior to 2.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in a 1 edit category post or 2 enable category action to "index.php". Recommendations Fo...
PT-2012-5570
Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter in the...
PT-2012-5163
Name of the Vulnerable Software and Affected Versions Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals versions 3.1.x through 3.1.11 Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals versions 4.0.x through 4.0.5 Description ...
PT-2011-4299
Name of the Vulnerable Software and Affected Versions Ruby on Rails version 3.0.5 Description The issue concerns the to s method in actionpack/lib/action dispatch/middleware/remote ip.rb, which fails to validate the X-Forwarded-For header in requests from IP addresses on a Class C network. This...
PT-2026-93337
Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description A path traversal flaw exists where a user with permissions to modify non built-in external feeds can overwrite arbitrary files on the server. In certain configurations, this action cou...
PT-2026-92737
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with access to the execution infrastructure to compromise the system...
PT-2026-91938
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 4.4.1 Description An authorization bypass exists in the '/api/mcp' endpoint. Attackers possessing a valid clientId and clientSecret from any single application can gain unrestricted access to user administration acros...
PT-2026-93000
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...
PT-2026-92860
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Diagnostics Interfaces component allows a low privileged attacker with network access via HTTP to compromise the Oracle...
PT-2026-92170
An issue in MitraStar GPT-2742GX4X5v6-SV GL g2.5 100XNT0b23 3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...
PT-2026-90997
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver due to improper buffer size validation leads to kernel memory corruption and a system crash...
PT-2026-89864
Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description SGLang allows unauthenticated pickle deserialization through the '/update weights from tensor' endpoint when no authentication keys are configured. The SafeUnpickler policy can be bypassed...
PT-2026-88163
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
PT-2026-87706
Name of the Vulnerable Software and Affected Versions Windows HTTP Print Provider affected versions not specified Description A heap-based buffer overflow exists in the Windows HTTP Print Provider. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...
PT-2026-86344
๐จ CVE-2026-84021 The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTML attribute, relying on a filter that can be evaded, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user...
PT-2026-84792
A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish Allure report results to read arbitrary files on the Jenkins controller's file system...
PT-2026-82998
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the dmaengine idxd component. The release callbacks idxd conf wq release, idxd conf engine release, and idxd conf group release call kfree on the enclosing...
PT-2026-82514
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap dump msg function when processing COAP messages containing options with zero length...