PT-2023-30437 · Admidio · Admidio

Name of the Vulnerable Software and Affected Versions: Admidio versions 4.2.12 and below Description: The issue is related to Cross Site Scripting XSS, which is a type of attack that can be used to steal user data or take control of user sessions. Recommendations: For Admidio versions 4.2.12 and...

PT-2023-18554 · Oracle +1 · Java +2

Name of the Vulnerable Software and Affected Versions: Bamboo Data Center and Server versions 8.1.0 through 9.3.0 Description: This issue allows an authenticated attacker to execute arbitrary code, which has high impact to confidentiality, integrity, and availability, and requires no user...

Unspecified Vulnerability in Adobe Acrobat Reader (CNVD-2025-16234)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A security vulnerability exists in Adobe Acrobat Reader version 23.006.20360 and earlier and version 20.005.30524 and earlier, which can be exploited by attackers to...

PT-2023-35596 · Git +1 · Ruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-buffer-overflow READ 1 crash type has been reported, with a crash state involving functions such as fill lines, rb dump backtrace with lines, and...

CVE-2023-39259

Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading to the elevation of privilege on the system...

PT-2023-29842 · Lionscripts.Com · Lionscripts.Com Webmaster Tools

Name of the Vulnerable Software and Affected Versions: LionScripts.Com Webmaster Tools versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

PT-2023-30201 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A security issue exists in the face unlock module, potentially affecting service confidentiality if successfully exploited. Recommendations: At the...

QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices

QNAP has released security updates to address two critical security flaws impacting its operating system that could result in arbitrary code execution. Tracked as CVE-2023-23368 CVSS score: 9.8, the vulnerability is described as a command injection bug affecting QTS, QuTS hero, and QuTScloud. "If...

PT-2023-27449 · Eclipse · Eclipse Parsson

Name of the Vulnerable Software and Affected Versions: Eclipse Parsson versions prior to 1.1.4 Eclipse Parsson versions prior to 1.0.5 Description: Parsing JSON from untrusted sources can lead to exploitation due to edge cases in Java's built-in support for parsing numbers with large scales,...

The vulnerability of the web interface for remote administration of TIONIX Virtual Security lies in the lack of protection for operational data, allowing attackers to obtain information about the software and current versions of the products.

The vulnerability of the web interface of the remote administration tool used for information protection in TIONIX Virtual Security is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain information abo...

PT-2023-31276 · Opentext · Opentext Asset Management X +1

Name of the Vulnerable Software and Affected Versions: opentext Service Management Automation X SMAX versions 2020.05 through 2022.11 opentext Asset Management X AMX versions 2021.08 through 2022.11 Description: The issue is an open redirect vulnerability that could allow attackers to redirect a...

PT-2023-8363 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 macOS Sonoma versions prior to 14.1...

PT-2023-27341

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue concerns a lightning vulnerability related to replacement cycling attacks. It is noted that decentralization is viewed as a spectrum, but it does...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications and Oracle FLEXCUBE Universal Banking are both products of Oracle Corporation, USA.Oracle Financial Services Applications is a suite of financial services Oracle Financial Services Applications is a suite of financial services software. Oracle Financial...

Design/Logic Flaw

The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database DB variables. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Code injection

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-43611 BIG-IP Edge Client for macOS vulnerability

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerability is due to an incomplete fix for CVE-2023-38418. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-40537 Multi-blade VIPRION Configuration utility session cookie vulnerability

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2023-6398 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation V2201 versions prior to V2201.0009 Tecnomatix Plant Simulation V2302 versions prior to V2302.0003 Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing...

PT-2023-13453 · Unknown · Orocommerce

Name of the Vulnerable Software and Affected Versions: OroCommerce versions 4.1.0 through 4.1.13 OroCommerce versions 4.2.0 through 4.2.10 OroCommerce versions 5.0.0 through 5.0.10 OroCommerce versions 5.1.0 Description: The issue allows a JS payload added to the product name to be executed at th...