PT-2023-27233 · Totolink · Totolink T10 V2

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 v2 version 5.9c.5061 B20200511 Description: The issue is a stack-based buffer overflow in the setStaticDhcpConfig function located in /lib/cste modules/lan.so. Attackers can exploit this by sending crafted data in an MQTT packet,...

PT-2023-4252 · Sap · Sap Powerdesigner +2

Name of the Vulnerable Software and Affected Versions: SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03 Description: The issue is related to the integration of a malicious library due to incorrect code generation management in the SAP SQL Anywhere tool for SAP...

PT-2023-4391 · Intel · Intel(R) Ai Hackathon

Name of the Vulnerable Software and Affected Versions: IntelR AI Hackathon software versions prior to 2.0.0 Description: The issue is related to an uncontrolled search path in the IntelR AI Hackathon software, which may allow an unauthenticated user to potentially enable escalation of privilege v...

PT-2023-14769 · Nootheme · Noo Timetable

Name of the Vulnerable Software and Affected Versions: NooTheme Noo Timetable plugin versions = 2.1.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. The estimated...

PT-2023-26601 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.0.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the "/QueryView.php" API endpoint. Recommendations: For ChurchCRM version 5.0.0,...

PT-2023-26996 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.1.1 Description: The issue allows files to be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path in the back office. There are no...

PT-2023-8021 · Abb · Abb Freelance Controllers Ac 700F +1

Name of the Vulnerable Software and Affected Versions: ABB Freelance controllers AC 700F versions 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 201...

PT-2023-4467 · Tp Link · Tp-Link Tl-Wr941Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR941ND version V6 Description: The issue is related to a buffer overflow via the pSize parameter at the "/userRpm/PingIframeRpm" API endpoint. This can potentially allow a remote attacker to execute arbitrary code or cause a denia...

PT-2023-4513 · D Link · D-Link Dap-2660

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2660 version 1.13 Description: The issue is related to buffer overflow errors in the /adv resource component of the D-Link DAP-2660 wireless access point's firmware. Exploitation of this issue can allow a remote attacker to gain...

PT-2023-26691 · NetGear · Netgear R7100Lg

Name of the Vulnerable Software and Affected Versions: Netgear R7100LG version 1.0.0.78 Description: A command injection issue was discovered via the password parameter at the "usb remote invite.cgi" endpoint. This allows for potential exploitation. Recommendations: For Netgear R7100LG version...

PT-2023-5237 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-859 versions A1 1.05 through A1 1.06B01 Beta01 Description: The issue is related to a command injection vulnerability via the lxmldbc system function at the "/htdocs/cgibin" endpoint. This vulnerability is associated with the failu...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Blink in Google Chrome which allows a remote attacker to perform arbitrary read/write via a crafted HTML page...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in XML in Google Chromewhich allows a remote attacker to potentially perform an ASLR bypass via a crafted HTML page...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Extensions in Google Chrome which allows a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page...

PT-2023-5387 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.11.1 and earlier Description: The issue is related to a SQL injection vulnerability in the Core Configuration Manager of Nagios XI. This vulnerability is caused by the lack of protection against SQL query structure...

PT-2023-22287 · Zoho · Zoho Manageengine Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Network Configuration Manager version 12.6.165 Description: An issue was discovered in the WebSocket endpoint, allowing Cross-site WebSocket hijacking. Recommendations: For Zoho ManageEngine Network Configuration Manager...

PT-2023-24324 · Unknown · Connected Io

Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue is related to a misconfiguration in the MQTT broker used for management and device communication. This misconfiguration allows devices to connect to the broker and issue commands to...

PT-2023-4166 · 3S Smart Software Solutions · Codesys Development System

Name of the Vulnerable Software and Affected Versions: CODESYS Development System versions 3.5.11.20 through 3.5.19.20 Description: The issue is related to insufficient data authentication in the CODESYS Development System, which may allow a remote attacker to modify the content of notifications...

PT-2023-4152 · Mitsubishi · Gt Softgot2000 +3

Name of the Vulnerable Software and Affected Versions: GT Designer3 versions affected versions not specified GOT2000 Series versions affected versions not specified GOT SIMPLE Series versions affected versions not specified GT SoftGOT2000 versions affected versions not specified Description: The...

PT-2023-9264

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile EPMM versions 11.10 and older Description The issue is related to an authentication bypass vulnerability in Ivanti EPMM, which allows unauthorized users to access restricted functionality or resources of the...