PT-2023-28047 · Unknown · Irina Sokolovskaya Goods Catalog

Name of the Vulnerable Software and Affected Versions: Irina Sokolovskaya Goods Catalog plugin versions = 2.4.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects versions of the Irina Sokolovskaya Goods Catalog plugin where authentication as a...

PT-2023-31991 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file view parcel.php. The manipulation of the id argument leads to sql injection...

CVE-2023-3775 Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service

A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service. Fixed in Vault Enterprise 1.15.0, 1.14.4, 1.13.8...

PT-2023-31899 · Unknown · Gym Management System Project

Name of the Vulnerable Software and Affected Versions: Gym Management System Project version 1.0 Description: The issue is related to an Insecure File Upload vulnerability on the file parameter of the "profile/i.php" page. This allows an authenticated attacker to obtain Remote Code Execution on t...

PT-2023-29134 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: process login.php affected versions not specified Description: The issue is related to the 'Email' parameter of the process login.php resource, which does not validate the characters received, sending them unfiltered to the database...

PT-2023-5611

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.23.1 Description The issue is related to an out-of-bounds read within the xrdp executable due to unbounds-checked access to font glyphs in xrdp painter.c. This can result in an out-of-bounds read within a potentially...

PT-2023-6494 · Ipswitch · Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: WS FTP Server versions prior to 8.7.4 WS FTP Server versions prior to 8.8.2 Description: A SQL injection vulnerability exists in the WS FTP Server manager interface. An attacker may be able to infer information about the structure and content...

PT-2023-31971 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue is a Cross-site Scripting XSS - Reflected vulnerability in the GitHub repository microweber/microweber. This type of vulnerability allows an attacker to inject malicious scrip...

CVE-2023-41068

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7. A user may be able to elevate privileges...

PT-2023-26066 · Unknown · Easyphp Webserver

Name of the Vulnerable Software and Affected Versions: EasyPHP Webserver version 14.1 Description: An OS command injection vulnerability has been found in EasyPHP Webserver. This issue could allow an attacker to gain full access to the system by sending a specially crafted exploit to the...

PT-2023-31787 · Cloudflare · Simple Cloudflare Turnstile

Name of the Vulnerable Software and Affected Versions: The Simple Cloudflare Turnstile plugin for WordPress versions up to, and including, 1.23.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes...

PT-2023-6729 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki version 1.40.0 Description: The issue exists due to the lack of protection for the web page structure. A remote attacker with a low-privileged user account can exploit this by sending a malicious link to the instance administrator,...

PT-2023-28132 · Poll Maker Team · Poll Maker Plugin

Name of the Vulnerable Software and Affected Versions: Poll Maker Team Poll Maker plugin versions = 4.7.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-5441 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.12.0 Description: The issue is related to incorrect code generation management in Docker Desktop, allowing a remote attacker to execute arbitrary code via query parameters in the message-box route. This can...

PT-2023-27747 · Juplink · Juplink Rx4-1500

Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 Description: The issue allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint "/webs/userpasswd.htm"...

CVE-2023-42456

Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to...

PT-2023-5415 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 versions DIR806A1 FW100CNb11 Description: The issue is related to a lack of proper data cleaning at the management level, which can be exploited by a remote attacker to execute arbitrary commands using the HTTP ST parameter. Th...

PT-2023-23431 · Fuxa · Fuxa

Name of the Vulnerable Software and Affected Versions: FUXA versions 1.1.12 and earlier Description: The issue allows for Local File Inclusion via the "/api/download" API endpoint. This could potentially be exploited to access sensitive files on the system. Recommendations: For versions 1.1.12 an...

PT-2023-28968 · WordPress · Saso Serial Codes Generator/Validator With Woocommerce Support

Name of the Vulnerable Software and Affected Versions: Serial Codes Generator and Validator with WooCommerce Support WordPress plugin versions prior to 2.4.15 Description: The issue concerns the Serial Codes Generator and Validator with WooCommerce Support WordPress plugin, where some settings ar...

PT-2023-6647 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana version 8.10.0 Description: The issue impacts Kibana when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern, allowing sensitive information to be recorded in logs in the event of an error. The...