CVE-2023-4589

Delinea Secret Server 10.9.000002 is affected by an insufficient verification of data authenticity vulnerability in its update mechanism. The root cause is that software updates lack digital signatures and do not validate update package integrity, allowing an attacker with administrator privilege...

Security Bulletin: NVIDIA Cumulus Linux - September 2023

NVIDIA has released a software update for NVIDIA Cumulus Linux. This update addresses security issues that may lead to information disclosure and denial of service. To protect your system, download and install the latest version of NVIDIA Cumulus Linux from the NVIDIA Enterprise Support Portal. G...

PT-2023-27906 · Frappe · Frappe

Name of the Vulnerable Software and Affected Versions: Frappe versions prior to 13.46.1 Frappe versions prior to 14.20.0 Description: A SQL Injection issue has been identified in the Frappe Framework, which could allow a malicious actor to access sensitive information. Recommendations: For versio...

PT-2023-24983 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.82 Description: The issue is related to a use after free vulnerability, which may allow attackers to execute arbitrary code. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.82,...

PT-2023-22931 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.82.0 Description: The issue allows a remote attacker to intercept network traffic, including sensitive information, due to improper certificate validation. Recommendations: For versions prior to 6.1.82.0,...

PT-2023-22917 · Svcagent · Svcagent

Name of the Vulnerable Software and Affected Versions: SVCAgent versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper access control, allowing attackers to trigger certain commands. Recommendations: For versions prior to SMR Sep-2023 Release 1, update to the SMR...

PT-2023-10314 · Aruba · Aruba Airwave

Name of the Vulnerable Software and Affected Versions: Aruba AirWave versions 7.7.14.1 and earlier Aruba AirWave versions 8.0.6 and earlier Description: The issue allows administrative users to escalate privileges to root on the underlying OS. Recommendations: For Aruba AirWave versions 7.7.14.1...

-pattern parameter in the rewrite action was removed in 13.1

When user configure rewrite action with pattern param in GUI or CLI in NS 13.1, below error may prompt:"ERRO: No such argument -pattern" e.g add rewrite action rwainsertintracaptchaag insertbeforeall "HTTP.RES.BODY8000.SETTEXTMODEIGNORECASE" q" " + "" -pattern "" ERROR: No such argument -pattern...

PT-2023-22915 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: One UI Home versions prior to SMR Sep-2023 Release 1 Description: The issue is related to an improper authorization vulnerability in the FolderContainerDragDelegate component. This vulnerability allows physical attackers to change some settin...

PT-2023-28088 · Unknown · Neutron Smart Vms

Name of the Vulnerable Software and Affected Versions: Neutron Smart VMS versions prior to b1130.1.0.1 Description: The issue is an Authentication Bypass by Spoofing vulnerability in Neutron Smart VMS, allowing unauthorized access. Recommendations: For versions prior to b1130.1.0.1, update to a...

PT-2023-24464

Name of the Vulnerable Software and Affected Versions Bookreen versions prior to 3.0.0 Description The issue is related to an Incomplete List of Disallowed Inputs vulnerability in Bookreen, which allows Privilege Escalation. Recommendations For versions prior to 3.0.0, update to version 3.0.0 or...

PT-2023-22925 · Samsung · Samsung Health

Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.24.2.011 Description: The issue is related to improper input validation, allowing attackers to write arbitrary files with Samsung Health privilege. Recommendations: For versions prior to 6.24.2.011, update t...

PT-2023-5343 · Librey · Librey

Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit be59098abd119cda70b15bf3faac596dfd39a744 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files. This...

PT-2023-27153 · Unknown · Saasproject Booking Package

Name of the Vulnerable Software and Affected Versions: SAASPROJECT Booking Package plugin versions = 1.6.01 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-27314 · WordPress · Media From Ftp

Name of the Vulnerable Software and Affected Versions: Media from FTP WordPress plugin versions prior to 11.17 Description: The issue arises from the Media from FTP WordPress plugin not properly limiting who can use the plugin. This may allow users with author+ privileges to move files around, su...

PT-2023-4915 · Unknown · Super Store Finder

Name of the Vulnerable Software and Affected Versions: Super Store Finder version 3.6 Description: The issue is related to the use of hardcoded credentials in the Super Store Finder Google Maps API integration, allowing a remote attacker to gain access to the administration panel. A hardcoded...

PT-2023-5254 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to a buffer over-read in the gpac repository. Specifically, the avi parse input file function in media tools/avilib.c at line 2083 is associated with a heap buffer overflow...

PT-2023-25945 · Atarim · Atarim Plugin +1

Name of the Vulnerable Software and Affected Versions: Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin versions = 3.9.3 Description: The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with...

PT-2023-22723 · Solwin Infotech · Avartan Slider Lite

Name of the Vulnerable Software and Affected Versions: Solwin Infotech Responsive WordPress Slider – Avartan Slider Lite plugin versions = 1.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...

PT-2023-26460 · WordPress · Suitedash Direct Login

Name of the Vulnerable Software and Affected Versions: SuiteDash Direct Login plugin versions = 1.7.6 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into...