PT-2023-19286 · Unknown · Jamie Poitra M Chart Plugin

Name of the Vulnerable Software and Affected Versions: Jamie Poitra M Chart plugin versions 1.9.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. There...

PT-2023-15810 · Jetbrains · Jetbrains Hub

Name of the Vulnerable Software and Affected Versions: JetBrains Hub versions prior to 2023.1.15725 Description: The issue concerns a missing Server-Side Request Forgery SSRF protection in the Auth Module integration. This could potentially allow for unauthorized access or actions. No information...

PT-2023-19933 · Apple +2 · Apple Macos +3

Name of the Vulnerable Software and Affected Versions: PowerPanel Business Local/Remote for Windows versions 4.8.6 and earlier PowerPanel Business Management for Windows versions 4.8.6 and earlier PowerPanel Business Local/Remote for Linux 32bit versions 4.8.6 and earlier PowerPanel Business...

PT-2023-23127 · Unknown · Repetier Server

Name of the Vulnerable Software and Affected Versions: Repetier Server versions through 1.4.10 Description: The issue is related to the lack of CSRF protection. This means that the software does not have measures in place to prevent cross-site request forgery attacks, which could allow an attacke...

PT-2023-22275 · Ribose · Ribose Rnp

Name of the Vulnerable Software and Affected Versions: Ribose RNP versions prior to 0.16.3 Description: The issue allows secret keys to remain unlocked after use. Recommendations: For versions prior to 0.16.3, update to version 0.16.3 or later to resolve the issue...

PT-2023-13996 · Unknown · Shareaholic Similar Posts

Name of the Vulnerable Software and Affected Versions: Shareaholic Similar Posts plugin versions 3.1.6 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts into t...

PT-2023-18577 · Alf.Io · Alf.Io

Name of the Vulnerable Software and Affected Versions: alfio-event/alf.io versions prior to 2.0-M4-2304 Description: The issue concerns an improper authorization of an index containing sensitive information. This could potentially allow for an authorization bypass through a user-controlled key...

Security Bulletin: NVIDIA CUDA Toolkit - April 2023

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit software. This update addresses security issues that may lead to code execution, limited denial of service, and limited information disclosure. To protect your system, download and install this software update from the CUDA Toolkit...

PT-2023-18417 · Tribe29 · Tribe29 Checkmk Appliance

Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.4 Description: The issue is related to Reflective Cross-Site-Scripting in Webconf. Recommendations: For versions prior to 1.6.4, update to version 1.6.4 or later to resolve the issue...

Cisco BroadWorks Network Server TCP Denial of Service Vulnerability

A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An...

JVN#73178249: Improper restriction of XML external entity references (XXE) in Shinseiyo Sogo Soft

Shinseiyo Sogo Soft provided by The Ministry of Justice improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. Solution Update the Software Update the software to the latest...

PT-2023-21581 · Unknown · Ui Desktop For Windows

Name of the Vulnerable Software and Affected Versions: UI Desktop for Windows versions 0.59.1.71 and earlier Description: A permission misconfiguration could allow a user to hijack VPN credentials while UID VPN is starting. Recommendations: For versions 0.59.1.71 and earlier, update to version...

PT-2023-12236 · Qihoo 360 · Qihoo 360 Safeguard +2

Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safeguard versions 12.1.0.1004 through 12.1.0.1005 Qihoo 360 Safeguard version 13.1.0.1001 Qihoo 360 Total Security versions 10.8.0.1060 through 10.8.0.1213 Qihoo 360 Safe Browser & 360 Chrome version 12 Description: The issue is a...

PT-2023-12233 · Qihoo 360 · Qihoo 360 Safeguard +3

Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safeguard versions 12.1.0.1004 through 13.1.0.1001 Qihoo 360 Total Security versions 10.8.0.1060 through 10.8.0.1213 360 Safe Browser & 360 Chrome version 13.0.2170.0 Description: The issue is a buffer overflow that allows for the...

PT-2023-2512 · Cisco · Cisco Industrial Network Director

Name of the Vulnerable Software and Affected Versions: Cisco Industrial Network Director affected versions not specified Description: A vulnerability in the Cisco Industrial Network Director could allow an authenticated, local attacker to read application data due to insufficient default file...

PT-2023-12235 · Qihoo · Qihoo 360 Safeguard

Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safe guard versions 12.1.0.1004 through 12.1.0.1005 Qihoo 360 Safe guard version 13.1.0.1001 Description: The issue allows an attacker to escalate privileges due to a Buffer Overflow vulnerability. Recommendations: For Qihoo 360 Saf...

PT-2023-17882 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A local escalation of privilege issue exists due to a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of...

B. Braun Battery Pack SP with Wi-Fi

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: B. Braun Melsungen AG Equipment: Battery Pack SP with Wi-Fi Vulnerability: Improper neutralization of directives in dynamically evaluated code 'Eval Injection' 2. RISK EVALUATION Successful exploitation...

PT-2023-14778 · Repute Infosystems · Arforms Form Builder

Name of the Vulnerable Software and Affected Versions: Repute InfoSystems ARForms Form Builder plugin versions 1.5.5 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...

PT-2023-2666 · Oracle · Oracle Sql Developer

Name of the Vulnerable Software and Affected Versions: Oracle SQL Developer versions prior to 23.1.0 Description: The issue is related to insufficient input validation in the Installation component of Oracle SQL Developer, allowing a high-privileged attacker with logon to the infrastructure where...