PT-2023-22145 · Unknown · A3 Portfolio

Name of the Vulnerable Software and Affected Versions: a3 Portfolio plugin versions 3.1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with author or higher privileges. This vulnerability allows an attacker to...

PT-2023-18059 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible permanent denial of service DoS due to resource exhaustion in the setMediaButtonBroadcastReceiver function of MediaSessionRecord.java. This could lead...

PT-2023-27360 · Harman · Harman Infotainment

Name of the Vulnerable Software and Affected Versions: Harman Infotainment versions 20190525031613 and later Description: The issue discloses the IP address via CarPlay CTRL packets. Recommendations: For Harman Infotainment versions 20190525031613 and later, consider restricting access to CarPlay...

PT-2023-4899 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.0 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.5 Description: The issue is related to an error in exception handling in t...

PT-2023-24910

Name of the Vulnerable Software and Affected Versions Canto plugin for WordPress versions up to, and including, 3.0.4 Description The Canto plugin for WordPress is vulnerable to Remote File Inclusion via the wp abspath parameter. This allows unauthenticated attackers to include and execute...

PT-2023-11769 · Unknown · Kindeditor

Name of the Vulnerable Software and Affected Versions: kindeditor version 4.1.12 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the content1 parameter in demo.jsp of kindeditor. This allows attackers to execute arbitrary code. Recommendations: For kindeditor...

PT-2023-21955 · Vladimir Statsenko · Terms Descriptions Plugin

Name of the Vulnerable Software and Affected Versions: Vladimir Statsenko Terms descriptions plugin versions = 3.4.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...

PT-2023-23874 · Avalanche · Avalanche

Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An unrestricted upload of file with a dangerous type could allow an attacker to achieve remote code execution. The issue is fixed in version 6.4.1. Recommendations: For Avalanche versions 6.3.x...

PT-2023-19632 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Guardian/CMC versions prior to 22.6.2 Description: The issue arises under certain conditions, influenced by timing and the usage of the Chrome web browser, where the user session is not always fully invalidated upon logout. This allows an...

PT-2023-26734 · Opnsense · Opnsense Community Edition +1

Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: A command injection issue in the "/api/cron/settings/setJob/" component allows attackers to execute arbitrary system commands...

PT-2023-4646 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.10 Description: The issue is related to the client-side enforcement of server-side security in Zoom clients, which may allow an authenticated user to enable information disclosure via network access. This could...

PT-2023-4528 · Phoenix Contact · Phoenix Contact Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT WP 6xxx series web panels versions prior to 4.0.10 Description: The issue is related to insufficient authorization procedures in the web panels, allowing an unauthenticated remote attacker to access upload functions of the HTT...

PT-2023-25606

Name of the Vulnerable Software and Affected Versions Digital Ant E-Commerce Software versions prior to 11 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker c...

PT-2023-25815

Name of the Vulnerable Software and Affected Versions Farmakom Remote Administration Console versions prior to 1.02 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-25620 · Pestudio · Pestudio

Name of the Vulnerable Software and Affected Versions: PEStudio version 9.52 Description: An issue in PEStudio allows a remote attacker to execute arbitrary code via a crafted DLL file to the PEStudio executable. Recommendations: For PEStudio version 9.52, consider disabling the execution of...

PT-2023-28209 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Inventory Management System, affecting the file product data.php. The manipulation of the columns1data argument leads to...

PT-2023-26524 · NetGear · Netgear Dg834Gv5

Name of the Vulnerable Software and Affected Versions: Netgear DG834Gv5 version 1.6.01.34 Description: The issue concerns multiple buffer overflows that can be triggered via the wla ssid and wla temp ssid parameters at the "bsw ssid.cgi" endpoint. Recommendations: For Netgear DG834Gv5 version...

PT-2023-4946 · Qemu +9 · Qemu +9

Name of the Vulnerable Software and Affected Versions: QEMU versions through 8.0.0 Description: The issue is related to a division by zero in the scsi disk reset function in hw/scsi/scsi-disk.c due to incorrect block size checking by scsi disk emulate mode select. This can cause QEMU and the gues...

PT-2023-28113 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the SourceCodester Inventory Management System, affecting the file edit sell.php. The manipulation of the up pid argument leads to SQL injection...

PT-2023-28040 · Emby · Media Browser Emby Server

Name of the Vulnerable Software and Affected Versions: Media Browser Emby Server version 4.7.13.0 Description: A vulnerability was found in the processing of the file /web/, which leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and...