PT-2023-26494 · Realwebcare · Realwebcare Wrc Pricing Tables

Name of the Vulnerable Software and Affected Versions: Realwebcare WRC Pricing Tables plugin versions prior to 2.3.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Realwebcare WRC Pricing Tables plugin. This vulnerability requires...

PT-2023-25537 · Relic · Relic

Name of the Vulnerable Software and Affected Versions: RELIC versions before commit 421f2e91cf2ba42473d4d54daf24e295679e290e Description: The issue allows attackers to execute arbitrary code and cause a denial of service. This is due to an integer overflow vulnerability in the bn get prime...

PT-2023-26242 · WordPress · Dharmesh Patel Post List With Featured Image

Name of the Vulnerable Software and Affected Versions: Dharmesh Patel Post List With Featured Image plugin versions 1.2 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-30363 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue concerns a floating point comparison with an incorrect operator in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to...

PT-2023-30268 · Public Knowledge · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp-lib versions prior to 3.3.0-16 Description: The issue concerns the use of a predictable algorithm in the random number generator. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve the issue...

CVE-2023-4650 Improper Access Control in instantsoft/icms2

Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

PT-2023-5318 · Acronis · Acronis Cloud Manager

Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to remote command execution due to improper input validation. This allows a remote attacker to execute arbitrary commands. Recommendations: For...

PT-2023-5229 · Schweitzer Engineering Laboratories · Acselerator Bay Screen Builder

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software versions prior to 1.0.49152.778 Description: The issue is related to an improper limitation of a pathname to a restricted directory, allowing relative path...

PT-2023-30049 · Instantsoft · Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue concerns a session fixation problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

DSA-5487-1 chromium - security update

Bulletin has no description...

PT-2023-30065 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository instantsoft/icms2. This allows an attacker to trick the server into making unintended requests...

PT-2023-28079 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-6 Description: The issue allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors, due to an uncontrolled resource consumption vulnerability in the...

PT-2023-5317 · Acronis · Acronis Cloud Manager

Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to remote command execution due to improper input validation. This allows a remote attacker to execute arbitrary commands. Recommendations: For...

Update to latest Citrix Hypervisor 8.2 CU1 hotfixes

To update to most recent hotfixes for the supported Citrix Hypervisor 8.2 CU1...

PT-2023-24651 · WordPress · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid plugin for WordPress versions up to, and including, 5.5.0 Description: The issue allows unauthorized decryption of private information. This is due to the passphrase and iv being hardcoded in the pm encrypt decrypt pass function,...

PT-2023-4681 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 30991 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to sensitive information disclosure due to excessive collection of system information. This is caused by...

PT-2023-28082 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-6 Description: The issue allows remote attackers to obtain sensitive information via unspecified vectors. This is related to the exposure of sensitive information to an unauthorized act...

PT-2023-21115 · Unknown · Notifyvisitors

Name of the Vulnerable Software and Affected Versions: NotifyVisitors plugin versions 1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the NotifyVisitors plugin...

PT-2023-23428 · Unknown · Chitor-Cms

Name of the Vulnerable Software and Affected Versions: Chitor-CMS versions prior to 1.1.2 Description: The issue is related to multiple SQL injection vulnerabilities. Recommendations: For versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue...

PT-2023-24713 · Unknown · Grandslambert Login Configurator

Name of the Vulnerable Software and Affected Versions: GrandSlambert Login Configurator plugin versions = 2.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for reflected...