PT-2023-33056 · Ibexa · Ibexa

Name of the Vulnerable Software and Affected Versions: ibexa affected versions not specified Description: The issue concerns user settings, including preferred time zone and number of items per page, which could be accessed by anonymous users. This impacts only the anonymous users themselves and...

PT-2023-7394 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: Intel Trace Analyzer and Collector versions prior to 2021.8.0 Description: The issue is related to an out-of-bounds write in the Intel Trace Analyzer and Collector software. This could potentially allow an authenticated user to escalate their...

PT-2023-22529 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: Libming swftophp version 0.4.8 Description: A Buffer Overflow issue allows a local attacker to cause a denial of service via the newVar N function in util/decompile.c. This issue can be exploited to disrupt service. Recommendations: For Libmi...

PT-2023-23621 · Sap · S4Core +1

Name of the Vulnerable Software and Affected Versions: SAP APPL versions 500 through 618 S4CORE version 100 Description: The Vendor Master Hierarchy does not perform necessary authorization checks for an authenticated user to access some of its functions. This could lead to modification of data...

PT-2023-2723 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

PT-2023-6953 · Docker +4 · Docker Distribution +4

Name of the Vulnerable Software and Affected Versions: distribution versions prior to 2.8.2-beta.1 Description: A flaw was found in the /v2/ catalog endpoint, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to...

PT-2023-22947 · Sap · Sapui5

Name of the Vulnerable Software and Affected Versions: SAPUI5 versions SAP UI 750, SAP UI 754, SAP UI 755, SAP UI 756, SAP UI 757, UI 700 200 Description: The issue arises from improper neutralization of input in SAPUI5, allowing the injection of untrusted CSS through the sap.m.FormattedText SAPU...

PT-2023-5346 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: Libtiff version 4.0.7 Description: A Buffer Overflow issue in the tiffcp function of Libtiff allows a local attacker to cause a denial of service. The vulnerability is related to a buffer overflow in memory, which can be exploited to disrupt...

PT-2023-23554 · Sngrep +1 · Sngrep +1

Name of the Vulnerable Software and Affected Versions: Sngrep version 1.6.0 Description: A heap buffer overflow issue was discovered in the function capture packet reasm ip at /src/capture.c. This issue affects the specified version of Sngrep. Recommendations: For Sngrep version 1.6.0, consider...

PT-2023-22534 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: The issue concerns SQL Injection via the QTY parameter. This allows for potential manipulation of database queries, which could lead to unauthorized access or data...

PT-2023-17387 · WordPress · Web Stories For Wordpress

Name of the Vulnerable Software and Affected Versions: Web Stories for WordPress versions prior to 1.32 Description: The Web Stories for WordPress plugin has a vulnerability that allows users with the "Author" role to bypass permission checks and access password-protected content. Normally, users...

PT-2023-11615 · Beescms · Beescms

Name of the Vulnerable Software and Affected Versions: beescms version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to delete the administrator account via a crafted request to "/admin/admin admin.php". This can be exploited by sending a malicious request to the specifi...

PT-2023-8236 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 114.0.5735.90 Description: The issue is related to insufficient policy enforcement in the Android Debug Bridge ADB component of Google Chrome on ChromeOS. This allows a local attacker with physical...

Hide My WP Ghost – Security < 5.0.20 - IP Address Spoofing

The plugin does not adequately restrict where IP Address information is retrieved from, leading to an IP Address Spoofing vulnerabilities. Attackers may use this to bypass IP blocking features provided by the plugin...

PT-2023-22513 · Imgproxy · Imgproxy

Name of the Vulnerable Software and Affected Versions: imgproxy versions 3.14.0 and earlier imgproxy prior to version 3.15.0 Description: The issue is related to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. This allows for potential exploitation...

PT-2023-23122 · Unknown · Opc Ua .Net Standard Reference Server

Name of the Vulnerable Software and Affected Versions: OPC UA .NET Standard Reference Server versions prior to 1.4.371.86 Description: The issue allows remote attackers to send malicious requests that expose sensitive information by placing it into an error message. This error message may be seen...

PT-2023-23176 · Mage Ai · Mage Ai

Name of the Vulnerable Software and Affected Versions: mage-ai versions 0.8.34 through 0.8.71 Description: The issue affects mage-ai, an open-source data pipeline tool, when used with user authentication enabled. It allows the terminal to be accessed by users who are not signed in or do not have...

PT-2023-7443 · Canon · C1127P +17

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY versions prior to firmware Ver.11.04 Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier Color imageCLASS LBP660C...

PT-2023-15508 · Jedox · Jedox

Name of the Vulnerable Software and Affected Versions: Jedox versions 2020.2.5 Description: The issue allows remote authenticated users to create jobs that can execute arbitrary code via Groovy scripts. This is related to the integrator component in the affected software. Recommendations: For...

PT-2023-22351 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 3.1.2 Description: The issue is a Cross Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via the Post function. This enables attackers to potentially inject malicious scripts into the websit...