PT-2023-4142 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 112.0.5615.49 Description: The issue is related to insufficient policy enforcement in the File System API of Google Chrome, allowing a remote attacker to bypass existing filesystem restrictions. This can be...

PT-2023-20891 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A stack-use-after-scope issue was discovered in the swf ReadSWF2 function in lib/rfxswf.c. This issue affects the SWFTools software. Recommendations: For SWFTools version 0.9.2, at the moment, there is no...

PT-2023-17251 · Sourcecodester · Sourcecodester Police Crime Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Police Crime Record Management System version 1.0 Description: A critical issue affects the GET Parameter Handler component in the /officer/assigncase.php file. The manipulation of the caseid argument leads to SQL injection,...

PT-2023-20982 · Unknown · Openapi Generator

Name of the Vulnerable Software and Affected Versions: openapi-generator versions up to v6.4.0 Description: The issue is related to a Server-Side Request Forgery SSRF in the component "/api/gen/clients/language". This allows attackers to access network resources and sensitive information via a...

PT-2023-17200 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical vulnerability was found in the SourceCodester Young Entrepreneur E-Negosyo System. The issue affects an unknown functionality of the file...

PT-2023-17180 · Rapid7 · Rapid7 Nexpose

Name of the Vulnerable Software and Affected Versions: Rapid7 Nexpose versions 6.6.186 and below Description: This issue allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. The vulnerability is related to forced browsing, which enables unauthorized acces...

PT-2023-20984 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 version 2.8.16 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the values parameter at the "/users/absence?search month=1" API endpoint. Recommendations: For Suprem...

PT-2023-17166 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: Xunrui CMS version 4.61 Description: A vulnerability was found in Xunrui CMS, affecting some unknown functionality of the file /dayrui/Fcms/View/system log.html. This issue leads to information disclosure and can be exploited remotely...

PT-2023-21363 · Databasir · Databasir

Name of the Vulnerable Software and Affected Versions: Databasir version 1.0.7 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the mockDataScript parameter. Recommendations: For Databasir version 1.0.7, consider restricting access to the...

PT-2023-17164 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: Xunrui CMS version 4.61 Description: A problematic issue was found in the software, affecting an unknown function of the file /config/myfield/test.php. This leads to information disclosure and can be exploited remotely. Recommendations: For...

PT-2023-21625 · Apple · Macos Ventura +1

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue allows an app to potentially read sensitive location information. Recommendations: For macOS...

PT-2023-17140 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability was found in the IOCTL Handler component of the library ObCallbackProcess.sys, affecting the function 0x222034/0x222038/0x22203C/0x222040. This leads to denial o...

PT-2023-2363 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability has been found in the ImfRegistryFilter.sys component of IObit Malware Fighter, related to incorrect clearing or release of resources. This affects the function...

PT-2023-17137 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS version 6.72 Description: A vulnerability was found in the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross-site scripting. The attack can be launched remotely. Recommendations: For OTCMS...

PT-2023-17128 · Unknown · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: Jianming Antivirus version 16.2.2022.418 Description: A critical vulnerability has been found in the library kvcore.sys of the component IoControlCode Handler, affecting unknown code. The manipulation leads to memory corruption. Attacking...

PT-2023-2024

Name of the Vulnerable Software and Affected Versions MLflow versions prior to 2.2.1 Description The issue is related to incorrect restriction of a directory path name with limited access. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information,...

PT-2023-8900 · Frrouting +8 · Frrouting +8

Name of the Vulnerable Software and Affected Versions: Frrouting bgpd version 8.4.2 Description: The issue is related to the bgp attr psid sub function in FRRouting, which can be exploited by a remote attacker to cause a denial of service. This is due to the lack of neutralization of special...

PT-2023-17839 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the append camera metadata function of camera metadata.c due to a missing bounds check. This could lead to local information disclosure, requiring System...

PT-2023-6548 · Jmsblog +1 · Jmsblog +1

Name of the Vulnerable Software and Affected Versions: PrestaShop jmsblog version 2.5.5 Description: The issue is related to a lack of protection for the SQL query structure in the Jms Blog module of the PrestaShop e-commerce web application. This can be exploited by a remote attacker to execute...

PT-2023-16718 · Unknown · Koc Energy Web Report System

Name of the Vulnerable Software and Affected Versions: As Koc Energy Web Report System versions prior to 23.03.10 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...