PT-2023-15963

Name of the Vulnerable Software and Affected Versions 10Web Map Builder for Google Maps WordPress plugin versions prior to 1.0.73 Description The issue arises from the plugin's failure to properly sanitise and escape certain parameters before using them in an SQL statement via an AJAX action. Thi...

PT-2023-16934 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: easyappointments versions prior to 1.5.0 Description: The issue is related to code injection in the GitHub repository alextselegidis/easyappointments due to unescaped output. This allows for potential code injection attacks. Recommendations:...

PT-2025-18820 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A system hang was observed due to the IOCB counts being out of order, blocking commands and subsequently hanging the system. The issue was resolved by synchronizing the IOCB count ...

PT-2025-18805

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-96.el9.x86 64 Description A vulnerability in the Linux kernel has been resolved, specifically in the scsi: qla2xxx module. The issue occurred when a command was completed in the abort path during driver...

PT-2023-19853 · Hashicorp +1 · Hashicorp Vault +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions prior to 1.10.11 HashiCorp Vault and Vault Enterprise versions prior to 1.11.8 HashiCorp Vault and Vault Enterprise versions prior to 1.12.4 HashiCorp Vault and Vault Enterprise versions prior to...

PT-2023-21012 · Unknown · Online Student Management System

Name of the Vulnerable Software and Affected Versions: Online Student Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the fromdate and todate parameters at the...

PT-2023-21011 · Unknown · Online Student Management System

Name of the Vulnerable Software and Affected Versions: Online Student Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the searchdata parameter at the "/eduauth/student/search.php" API endpoint...

PT-2023-21004 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/kruxton/sales report.php" API endpoint. Recommendations: For Best...

PT-2023-19776 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/databases/table/list" API endpoint. Recommendations: For Funadmin version 3.2.0, consider restricting...

PT-2023-16004 · Proofpoint · Proofpoint Enterprise Protection

Name of the Vulnerable Software and Affected Versions: Proofpoint Enterprise Protection PPS/POD versions 8.20.0 and below Description: The webutils in Proofpoint Enterprise Protection contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'...

PT-2023-1682 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3.6 through 6.3.20 FortiWeb versions 7.0.0 through 7.0.2 FortiWeb 6.4 all versions Description: The issue is related to an improper neutralization of special elements used in an os command, also known as 'os command...

PT-2023-35425 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: The issue concerns error handling in the mmc spi probe function. It was introduced in version v2.6.24 and fixed in version v5.15.95. The actual impact and attack plausibility have not yet...

PT-2023-35409 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: A potential memory leak issue was identified in the ice add adv recipe function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...

Atlassian Confluence 4.3.x < 6.2.1 Access Restriction Bypass using watch notifications

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to version 6.2.1. It is, therefore, affected by access restriction bypass using watch notifications which may permit an attacker to receive workbox notifications containing the...

PT-2023-16661 · Unknown · Meddatapacs

Name of the Vulnerable Software and Affected Versions: MedDataPACS versions prior to 2023-03-03 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: Fo...

PT-2023-2220 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 15.7.8 GitLab versions 15.8 through 15.8.4 GitLab versions 15.9 through 15.9.2 Description: An issue has been discovered in GitLab that allows a project maintainer to extract a Datadog integration API key by...

PT-2023-19720 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: A SQL injection issue was found in the Judging Management System. The vulnerability can be exploited via the sid parameter at the "/php-jms/updateBlankTxtview.php" API endpoint...

PT-2023-2278 · Coredial · Sipxcom

Name of the Vulnerable Software and Affected Versions: CoreDial sipXcom versions up to and including 21.04 Description: The issue is related to Improper Neutralization of Argument Delimiters in a Command, allowing XMPP users to inject arbitrary arguments into a system command. This can be used to...

PT-2023-16787 · WordPress · Cost Calculator

Name of the Vulnerable Software and Affected Versions: Cost Calculator plugin for WordPress versions up to, and including, 1.8 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping via the nd cc meta box cc price icon parameter...

PT-2023-20669 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 14.3-rc-1 through 14.4.5 XWiki Platform versions 14.9-rc-1 and earlier, excluding 14.4.6 and later Description: The issue arises from the org.xwiki.store.script.TemporaryAttachmentsScriptServiceuploadTemporaryAttachmen...