PT-2023-9032 · Unknown +8 · Exfatprogs +8

Name of the Vulnerable Software and Affected Versions: exfatprogs versions prior to 1.2.2 Description: The issue is related to the read file dentry set function in the exfatprogs utility, which is associated with out-of-bounds memory access. This could allow an attacker to impact data integrity...

PT-2023-6344 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 Description: The issue exists due to insufficient input validation in the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK components of Oracle Outside In Technology. This...

PT-2023-29586 · Unknown · Christopher Finke Feed Statistics

Name of the Vulnerable Software and Affected Versions: Christopher Finke Feed Statistics plugin versions = 4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-29477 · Unknown · Matt Mckenny Stout Google Calendar Plugin

Name of the Vulnerable Software and Affected Versions: Matt McKenny Stout Google Calendar plugin versions = 1.2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the use...

PT-2023-12128 · Ericsson · Ericsson Mobile Switching Center Server

Name of the Vulnerable Software and Affected Versions: Ericsson Mobile Switching Center Server MSC-S versions BC 18A and IS 3.1 through IS 3.1 CP21 Description: The issue allows relative path traversal via a specific parameter in the https request after authentication, which enables access to fil...

PT-2023-22931 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.82.0 Description: The issue allows a remote attacker to intercept network traffic, including sensitive information, due to improper certificate validation. Recommendations: For versions prior to 6.1.82.0,...

PT-2023-24983 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.82 Description: The issue is related to a use after free vulnerability, which may allow attackers to execute arbitrary code. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.82,...

PT-2023-30363 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue concerns a floating point comparison with an incorrect operator in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to...

PT-2023-26556 · Unknown · Matrix-Appservice-Bridge

Name of the Vulnerable Software and Affected Versions: matrix-appservice-bridge versions 4.0.0 through 8.1.1 matrix-appservice-bridge versions 9.0.0 Description: A malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the...

PT-2023-25597 · Cththemes · Cththemes Balkon

Name of the Vulnerable Software and Affected Versions: cththemes Balkon plugin versions 1.3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for malicious scripts to be injected into web...

PT-2023-4209 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: The issue is related to insufficient access control in the Voice Memos component of the macOS operating system. It may allow an attacker to gain unauthorized access to sensitive information. The...

PT-2023-25132 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Ivanti AntiVirus Product versions prior to 7.9.1.285 Description: An out-of-bounds write vulnerability on Windows operating systems causes the Ivanti AntiVirus Product to crash. Recommendations: Update to Ivanti AV Product version 7.9.1.285 o...

PT-2023-22874 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.2.03.1 Description: The issue is related to improper access control in Samsung Pass, allowing physical attackers to access Samsung Pass data on an unlocked device under certain conditions. Recommendations: For...

PT-2023-21602 · Unknown · Aakif Kadiwala Tags Cloud Manager

Name of the Vulnerable Software and Affected Versions: Aakif Kadiwala Tags Cloud Manager plugin versions 1.0.0 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-3350 · Fortinet · Fortiadcmanager +1

Name of the Vulnerable Software and Affected Versions: FortiADC Manager versions prior to 7.1.0 FortiADC versions 7.0.0 through 7.1.2 FortiADC version 7.2.0 Description: The issue is related to the improper neutralization of special elements used in an operating system command, which can be...

PT-2023-3599

Name of the Vulnerable Software and Affected Versions Requests versions 2.3.0 through 2.30.0 Description The issue is related to the leaking of Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This occurs due to how the rebuild proxies function is used to...

PT-2023-19117 · WordPress · Rvola Wp Original Media Path

Name of the Vulnerable Software and Affected Versions: RVOLA WP Original Media Path plugin versions = 2.4.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated administrators. This vulnerability allows for malicious script execution on t...

PT-2023-12116 · Mblog · Mblog

Name of the Vulnerable Software and Affected Versions: mblog version 3.5.0 Description: The issue allows attackers to execute arbitrary code via a crafted theme when it gets selected. This is due to an OS Command injection vulnerability. Recommendations: For mblog version 3.5.0, update to a newer...

PT-2023-21201 · Ibm · Ibm Counter Fraud Management For Safer Payments

Name of the Vulnerable Software and Affected Versions: IBM Counter Fraud Management for Safer Payments versions 6.1.0.00 through 6.1.1.02 IBM Counter Fraud Management for Safer Payments versions 6.2.0.00 through 6.2.2.02 IBM Counter Fraud Management for Safer Payments versions 6.3.0.00 through...

PT-2023-19355 · WordPress · Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin

Name of the Vulnerable Software and Affected Versions: Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin versions = 2.5.3 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inje...