PT-2023-18532 · Unknown · Kubeoperator

Name of the Vulnerable Software and Affected Versions: KubeOperator versions 3.16.3 and below Description: The issue allows unauthorized access to API interfaces, potentially leaking sensitive information and allowing takeover of the cluster under certain conditions. This is due to a flaw in...

PT-2023-12829 · Wifey · Wifey

Name of the Vulnerable Software and Affected Versions: wifey affected versions not specified Description: The issue is related to Command Injection via the connect function due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated...

PT-2023-9888 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: simpleSAMLphp versions prior to 1.0 Description: A vulnerability was found in the Information Cards Module and classified as problematic. This issue affects some unknown processing, leading to cross-site scripting. The attack may be initiated...

PT-2023-10332 · Forumhulp · Forumhulp

Name of the Vulnerable Software and Affected Versions: ForumHulp affected versions not specified Description: A critical issue was found in ForumHulp searchresults, affecting the list keywords function of the file event/listener.php. The manipulation of the word argument leads to SQL injection...

PT-2023-10208 · Kelvinmo · Simplexrd

Name of the Vulnerable Software and Affected Versions: kelvinmo simplexrd versions up to 3.1.0 Description: A vulnerability was found in the file simplexrd/simplexrd.class.php, which leads to xml external entity reference. This issue affects unknown code and can be addressed by upgrading to versi...

PT-2023-10207 · Unknown · Ss15-This-Is-Sparta

Name of the Vulnerable Software and Affected Versions: ss15-this-is-sparta affected versions not specified Description: A vulnerability has been found in the component Main Page, specifically affecting the file js/roomElement.js. The manipulation leads to cross site scripting. The attack can be...

PT-2023-10807 · Petermu · Nodebatis

Name of the Vulnerable Software and Affected Versions: PeterMu nodebatis versions up to 2.1.x Description: A critical issue has been found, affecting an unknown function, which leads to sql injection. Upgrading to version 2.2.0 can address this issue. Recommendations: For versions up to 2.1.x,...

PT-2023-10123 · Piwigo · Piwigo-Guest-Book

Name of the Vulnerable Software and Affected Versions: Piwigo-Guest-Book versions up to 1.3.0 Description: A critical issue affects the Navigation Bar component, specifically the include/guestbook.inc.php file. The manipulation of the start argument leads to sql injection. Recommendations: For...

PT-2023-11811 · Gturri · Xmlrpc

Name of the Vulnerable Software and Affected Versions: gturri aXMLRPC versions up to 1.12.0 Description: A vulnerability was found in the ResponseParser function of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference...

PT-2023-14431

Name of the Vulnerable Software and Affected Versions: Nexxt Amp300 ARN02304U8 version 42.103.1.5095 Nexxt Amp300 ARN02304U8 version 80.103.2.5045 Description: The web service on Nexxt Amp300 ARN02304U8 devices allows remote OS command execution by placing in the JSON host field to the "ping"...

PT-2023-12402 · Hesburgh Libraries Of Notre Dame · Sipity

Name of the Vulnerable Software and Affected Versions: Hesburgh Libraries of Notre Dame Sipity versions prior to 2021.8 Description: A critical issue has been found, affecting the SearchCriteriaForWorksParameter function in the file app/parameters/sipity/parameters/search criteria for works...

PT-2023-9995 · Ziftr · Ziftr Primecoin

Name of the Vulnerable Software and Affected Versions: Ziftr primecoin versions up to 0.8.4rc1 Description: A vulnerability was found in the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing...

PT-2023-24655

Name of the Vulnerable Software and Affected Versions Salt-SSH affected versions not specified Description The issue concerns a predictable script path in the Salt-SSH pre-flight option, allowing an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and kno...

PT-2022-27918 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the cameo.cameo.netstat rsname parameter in the tools netstat function, specifically within the sub 41E730 function. Recommendations: For TRENDne...

PT-2022-28142 · Unknown · Modbus Poll

Name of the Vulnerable Software and Affected Versions: Modbus Tools Modbus Poll versions up to 9.10.0 Description: A critical issue was found in the mbpoll.exe file of the mbp File Handler component, leading to a buffer overflow. This can be exploited remotely. The issue affects some unknown...

PT-2022-28102 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to insufficient granularity of access control, allowing an attacker to archive any user's public or private post. This affects the usememos/memos GitHub repository...

PT-2022-28101 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue concerns an improper verification of the source of a communication channel. This affects the usememos/memos GitHub repository. There is no information provided about the estimated...

PT-2022-8066 · Pypi · Yolapi

Name of the Vulnerable Software and Affected Versions: yolapi affected versions not specified Description: A problematic vulnerability was found in yolapi, affecting the render description function of the file yolapi/pypi/metadata.py. The manipulation of the text argument leads to cross-site...

PT-2022-28080 · Unknown · Dolibarr Project Timesheet

Name of the Vulnerable Software and Affected Versions: dolibarr project timesheet versions up to 4.5.5 Description: A vulnerability was found in the Form Handler component, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations: For versions up to 4.5.5,...

PT-2022-9029 · Openmrs · Openmrs Appointment Scheduling Module

Name of the Vulnerable Software and Affected Versions: OpenMRS Appointment Scheduling Module versions up to 1.12.x Description: A problematic issue has been found, affecting the validateFieldName function of the AppointmentTypeValidator.java file. This leads to cross-site scripting and can be...