PT-2023-22504 · Unknown · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Student Study Center Desk Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability. It affects the adminreportsindex.php endpoint, specifically the date from parameter. Recommendations: F...

PT-2023-23729 · Ombi · Ombi

Name of the Vulnerable Software and Affected Versions: Ombi versions prior to 4.38.2 Description: The issue is an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host operating system. This vulnerability is present i...

PT-2023-21296 · Sourcecodester · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Exam System, affecting unknown code of the file /kelasdosen/data. The manipulation of the argument columns1data leads t...

PT-2023-22574 · Prestashop · Prestashop Cdesigner

Name of the Vulnerable Software and Affected Versions: PrestaShop cdesigner versions prior to 3.1.9 Description: The issue is related to SQL Injection via the CdesignerTraitementModuleFrontController::initContent function. Recommendations: For versions prior to 3.1.9, update to version 3.1.9 or...

PT-2023-2925

Name of the Vulnerable Software and Affected Versions Weaver e-cology versions up to 9.0 Description A problematic vulnerability was found in the RequestInfoByXml function of the API component, leading to xml external entity reference. This issue is related to incorrect restriction of XML links t...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : cups-filters vulnerability (USN-6083-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6083-1 advisory. It was discovered that cups-filters incorrectly handled the beh CUPS backend. A remote attacker could possibly use this issue to...

PT-2023-23504 · Unknown · Glazedlists

Name of the Vulnerable Software and Affected Versions: glazedlists version 1.11.0 Description: The issue is related to an XML Deserialization vulnerability that allows an attacker to execute arbitrary code. This is achieved via the BeanXMLByteCoder.decode parameter. Recommendations: For glazedlis...

PT-2023-20615 · Jenkins · Credentials Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Code Dx Plugin versions 3.1.0 and earlier Description: The issue concerns the storage and display of Code Dx server API keys. In affected versions, these keys are stored unencrypted in job config.xml files on the Jenkins controller an...

PT-2023-3023 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L firmware version 1.17B01 BETA Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute arbitrary code. The...

PT-2023-19142 · Unknown · Arconix Shortcodes

Name of the Vulnerable Software and Affected Versions: Arconix Shortcodes plugin versions = 2.1.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher authentication levels. There is no information provided about the...

PT-2023-21092 · Gira · Gira Homeserver

Name of the Vulnerable Software and Affected Versions: Gira HomeServer versions up to 4.12.0.220829 beta Description: A problematic issue was found, affecting unknown code of the file /hslist. The manipulation of the argument lst with the input debug%27" leads to cross-site scripting. The attack...

PT-2023-18955 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR versions with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue allows an unprivileged remote attacker to download files by using an unprivileged account via the "REST...

PT-2023-23486 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/eval/admin/manage class.php?id=" endpoint. The id variable is vulnerable to injection attacks. No...

PT-2023-20867 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System, affecting the POST Parameter Handler component in the /kelas/data file. The manipulation of the columns1data...

PT-2023-20782 · H3C · H3C R160

Name of the Vulnerable Software and Affected Versions: H3C R160 version V1004004 Description: A critical issue has been found in the file /goForm/aspForm, where the manipulation of the go argument leads to a stack-based buffer overflow. The issue affects some unknown functionality of this file...

PT-2023-22430

Name of the Vulnerable Software and Affected Versions Webroot SecureAnywhere Endpoint Protection CE versions 9.0.33.39 and before Description An issue in Webroot SecureAnywhere Endpoint Protection CE allows a local attacker to bypass protections via the default allowlist feature being stored as...

PT-2023-20364 · Ibm · Ibm Security Verify Access

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0 through 10.0.5 Description: The issue allows an attacker to crash the webseald process using specially crafted HTTP requests, resulting in loss of access to the system. Recommendations: For versions...

distribution catalog API endpoint can lead to OOM via malicious user input

Impact Systems that run distribution built after a specific commit running on memory-restricted environments can suffer from denial of service by a crafted malicious /v2/catalog API endpoint request. Patches Upgrade to at least 2.8.2-beta.1 if you are running v2.8.x release. If you use the code...

PT-2023-20632 · Digitalpersona · Digitalpersona Fpsensor

Name of the Vulnerable Software and Affected Versions: DigitalPersona FPSensor version 1.0.0.1 Description: A problematic issue has been found in the processing of the file C:Program Files x86FPSensorbinDpHost.exe, leading to an unquoted search path. This issue requires local attacking to be...

PT-2023-20746 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection...