PT-2023-24857 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: A Missing Authentication for Critical Function issue could allow an attacker to run arbitrary commands on managed devices by an...

PT-2023-4876 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to an Execution with Unnecessary Privileges vulnerability in the SEL-5037 SEL Grid Configurator, which could allow...

PT-2023-28015 · Grupposcai · Realgimm

Name of the Vulnerable Software and Affected Versions: GruppoSCAI RealGimm version 1.1.37p38 Description: A SQL injection issue in the Data Richiesta dal parameter allows attackers to access the database and execute arbitrary commands via a crafted SQL query. Recommendations: For GruppoSCAI...

PT-2023-5247 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to a NULL Pointer Dereference in the gpac multimedia platform. This can be exploited to cause a denial of service. The vulnerable components include utils/xml parser.c,...

PT-2023-28078 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-6 Description: The issue is related to improper neutralization of special elements used in an OS command, allowing remote authenticated users to execute arbitrary commands via unspecifi...

PT-2023-28720 · WordPress · Woo Custom Emails

Name of the Vulnerable Software and Affected Versions: The Woo Custom Emails for WordPress versions up to, and including, 2.2 Description: The issue is related to Reflected Cross-Site Scripting via the wcemails edit parameter due to insufficient input sanitization and output escaping. This allows...

PT-2023-24651 · WordPress · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid plugin for WordPress versions up to, and including, 5.5.0 Description: The issue allows unauthorized decryption of private information. This is due to the passphrase and iv being hardcoded in the pm encrypt decrypt pass function,...

PT-2023-28018 · Grupposcai · Realgimm

Name of the Vulnerable Software and Affected Versions: GruppoSCAI RealGimm version 1.1.37p38 Description: An improper error handling issue in the ErroreNonGestito.aspx component allows attackers to obtain sensitive technical information via a crafted SQL query. Recommendations: For GruppoSCAI...

PT-2023-5227 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to the use of hard-coded credentials in the SEL-5037 SEL Grid Configurator, which allows authentication bypass. Fo...

PT-2023-30275 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.13.2 Description: The issue concerns improper privilege management. It is estimated that a significant number of devices may be affected, but the exact number is not specified. There is no information provid...

PT-2023-27966 · Phpjabbers · Phpjabbers Business Directory Script

Name of the Vulnerable Software and Affected Versions: phpjabbers Business Directory Script version 3.2 Description: The issue is related to SQL Injection via the column parameter. This allows for potential manipulation of database queries. Recommendations: For phpjabbers Business Directory Scrip...

PT-2023-24845 · Didier Sampaolo · Spamreferrerblock

Name of the Vulnerable Software and Affected Versions: Didier Sampaolo SpamReferrerBlock plugin versions = 2.22 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Didier Sampaolo SpamReferrerBlock plugin. This vulnerability requires authenticatio...

PT-2023-24710 · WordPress · Miled Wordpress Social Login

Name of the Vulnerable Software and Affected Versions: Miled WordPress Social Login plugin versions = 3.0.4 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious code in...

PT-2023-24385 · WordPress · Subscribers Text Counter

Name of the Vulnerable Software and Affected Versions: Subscribers Text Counter WordPress plugin versions prior to 1.7.1 Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This...

PT-2023-27974 · Tenda · Tenda Ac7 +2

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 1.0 V15.03.06.44 Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC5 version 1.0RTL V15.03.06.28 Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetIpMacBind" API endpoint. This issue...

PT-2023-24719 · WordPress · Kaplugins Google Fonts For Wordpress

Name of the Vulnerable Software and Affected Versions: KAPlugins Google Fonts For WordPress plugin versions = 3.0.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

PT-2023-24623 · WordPress · Woocommerce Box Office

Name of the Vulnerable Software and Affected Versions: WooCommerce Box Office plugin versions = 1.1.50 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by authenticated users with contributor or higher permissions. There is ...

PT-2023-24711 · Yandex · Alexander Semikashev Yandex Metrica Counter

Name of the Vulnerable Software and Affected Versions: Alexander Semikashev Yandex Metrica Counter plugin versions = 1.4.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Alexander Semikashev Yandex Metrica Counter plugin. This vulnerability...

PT-2023-27973 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Description: A stack overflow issue was discovered in Tenda AC7, which can be triggered via the security 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda AC7 version...

PT-2023-4597 · Vmware · Vmware Aria Operations For Networks

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Networks versions 6.0 through 6.10 Description: The issue is related to an authentication bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria...