PT-2023-5130 · Microsoft · Windows Miracast Wireless Display +1

Name of the Vulnerable Software and Affected Versions: Windows Miracast Wireless Display affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Miracast Wireless Display adapter. It allows remote attackers to execute arbitrary cod...

PT-2023-5890 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS affected versions not specified Description: The issue is related to the lack of authentication in the Open5GS implementation of the GTP protocol for mobile networks. This allows a remote attacker to send an HTTP request to an Open5GS...

PT-2023-25255 · Google · Android

Name of the Vulnerable Software and Affected Versions: NotificationAccessSettings.java affected versions not specified Description: The issue is caused by a logic error in the code of NotificationAccessSettings.java, specifically in the updateList method. This error can lead to the hiding of...

CVE-2023-2813 Multiple Themes - Reflected XSS

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2,...

PT-2023-4591 · D Link · D-Link Dar-8000-10

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000-10 up to 20230809 Description: A critical issue affects the file /app/sys1.php, where the manipulation of the cmd argument with the input id leads to os command injection. This can be initiated remotely. The exploit has been...

PT-2023-4490 · Igor Pavlov +1 · 7-Zip +1

Name of the Vulnerable Software and Affected Versions: 7-Zip affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this issue, where the target must visit a malicious pa...

CVE-2023-30871

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

CVE-2023-30871 WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

CVE-2023-30871

CVE-2023-30871 affects the WordPress plugin Stock Exporter for WooCommerce by PT Woo Plugins (by Webdados). On versions = 1.2.0. If upgrading immediately is not possible, apply vendor-supplied mitigations/patches where available and ensure input/output handling adheres to secure coding practices....

PT-2023-18066 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible code execution due to type confusion, which could lead to remote code execution without requiring additional execution...

PT-2023-5629 · Jpeg · Jpeg

Name of the Vulnerable Software and Affected Versions: jpeg affected versions not specified Description: The issue is related to a missing bounds check in the jpeg component, which could lead to local information disclosure with System execution privileges needed. User interaction is not needed f...

Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Credentials (CVE-2020-6985)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Moxa PT-7728 Series Switch Improper Authorization (CVE-2016-4514)

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Moxa PT-7528 and PT-7828 Series Buffer Overflow (CVE-2020-6989)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7528 and PT-7828 Series Weak Password Requirements (CVE-2020-6995)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Cryptographic Key (CVE-2020-6983)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7528 and PT-7828 Series Information Exposure (CVE-2020-6993)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

PT-2023-6403 · Procps Ng +11 · Procps-Ng +11

Name of the Vulnerable Software and Affected Versions: procps-ng versions affected versions not specified Description: The issue is related to a buffer overflow in the procps-ng utility, specifically in the "ps" utility, which allows a user to write almost unlimited amounts of unfiltered data int...

Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm (CVE-2020-6987)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. This plugin only works with Tenable.ot. Please visit...