PT-2023-18247 · Unknown · Semsharefileprovider

Name of the Vulnerable Software and Affected Versions: SemShareFileProvider versions prior to SMR May-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to access protected data. Recommendations: For versions prior to SMR May-2023 Release 1, upda...

PT-2023-18628 · Clio Grow · Clio Grow

Name of the Vulnerable Software and Affected Versions: Clio Grow plugin versions prior to 1.0.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authentication bypass for admin+ users. Recommendations: For versions prior to 1.0.0, update to version 1.0.0 or later to...

Important: tomcat9

Issue Overview: The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing but extremely hard to trigger concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.0.0-M1 to 9.0.60 and 8.5...

PT-2023-16947 · Amazon +1 · Fire Os +2

Name of the Vulnerable Software and Affected Versions: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5 Insignia TV with FireOS version 7.6.3.3 Description: The issue is related to an improper JPAKE implementation, which allows offline PIN brute-forcing due to the initialization of random...

PT-2023-16945 · Amazon +1 · Amazon Fire Tv Stick +1

Name of the Vulnerable Software and Affected Versions: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5 Insignia TV with FireOS versions prior to 7.6.3.3 Description: An issue with the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are...

PT-2023-19274 · WordPress · Wpdatatables

Name of the Vulnerable Software and Affected Versions: wpDataTables plugin versions = 2.1.49 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing contributors or higher-privileged users to inject malicious scripts. Recommendations: For wpDataTables plugin versions = 2.1.4...

PT-2023-16946 · Amazon +1 · Amazon Fire Tv Stick +1

Name of the Vulnerable Software and Affected Versions: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5 Insignia TV with FireOS versions prior to 7.6.3.3 Description: The issue is related to the setMediaSource function on the amzn.thin.pl service, which does not properly sanitize the source...

PT-2023-19241 · WordPress · Profilepress Membership Team Profilepress

Name of the Vulnerable Software and Affected Versions: ProfilePress Membership Team ProfilePress plugin versions = 4.5.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into...

PT-2023-23024

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads versions 3.1 through 3.1.1.4.1 Description The issue is related to an Improper Authentication vulnerability in the Easy Digital Downloads plugin, which allows unauthorized Privilege Escalation. Recommendations For versio...

PT-2023-17259 · Pixelyoursite · The Product Catalog Feed By Pixelyoursite

Name of the Vulnerable Software and Affected Versions: The Product Catalog Feed by PixelYourSite WordPress plugin versions prior to 2.1.1 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the edit parameter is not properly sanitized and escaped befor...

PT-2023-16773 · WordPress · Ruby Help Desk

Name of the Vulnerable Software and Affected Versions: Ruby Help Desk WordPress plugin versions prior to 1.3.4 Description: The issue allows an attacker to close and/or add files and replies to tickets other than their own, as the plugin does not ensure that the ticket being modified belongs to t...

SUSE-SU-2023:2076-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant bsc1209714. - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant bsc1209713. The following non-security bug was fixed: - Fix...

SUSE-SU-2023:2068-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn bsc1210507...

PT-2023-17014 · Hypr · Hypr Keycloak Authenticator Extension

Name of the Vulnerable Software and Affected Versions: HYPR Keycloak Authenticator Extension versions prior to 7.10.2 HYPR Keycloak Authenticator Extension versions prior to 8.0.3 Description: The issue is related to an Improper Authentication vulnerability in the HYPR Keycloak Authenticator...

PT-2023-21201 · Ibm · Ibm Counter Fraud Management For Safer Payments

Name of the Vulnerable Software and Affected Versions: IBM Counter Fraud Management for Safer Payments versions 6.1.0.00 through 6.1.1.02 IBM Counter Fraud Management for Safer Payments versions 6.2.0.00 through 6.2.2.02 IBM Counter Fraud Management for Safer Payments versions 6.3.0.00 through...

SUSE-SU-2023:0879-2 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc bsc1185000. - CVE-2020-14394: Fixed infinite loop in xhciringchainlength bsc1180207...

PT-2023-14027 · Ibm · Ibm Spectrum Scale

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Scale versions 5.1.2.1 through 5.1.6.0 Description: The issue allows programs running inside the container to overcome the isolation mechanism, potentially gaining additional capabilities or accessing sensitive information on the...

ADC Upgrade best practice

ADC Upgrade Best practices...

PT-2023-18713 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2023.1.22 and earlier Description: The issue is related to improper access control in the Web Login listener, allowing an authenticated user to bypass administrator-enforced Web Login restrictions...

PT-2023-19355 · WordPress · Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin

Name of the Vulnerable Software and Affected Versions: Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin versions = 2.5.3 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inje...