12580 matches found
PT-2023-19120 · Gtmetrix · Gtmetrix For Wordpress
Name of the Vulnerable Software and Affected Versions: GTmetrix GTmetrix for WordPress plugin versions 0.4.5 and earlier Description: A Reflected Cross-Site Scripting XSS issue has been identified. This type of issue occurs when an application takes untrusted input and reflects it back to the use...
PT-2023-21767 · Rocket · Universe +1
Name of the Vulnerable Software and Affected Versions: Rocket Software UniData versions prior to 8.2.4 build 3003 Rocket Software UniVerse versions prior to 11.3.5 build 1001 Rocket Software UniVerse versions prior to 12.2.1 build 2002 Description: The issue is a memory-exhaustion problem where a...
PT-2023-15425 · Joomunited · Wp Table Manager
Name of the Vulnerable Software and Affected Versions: JoomUnited WP Table Manager plugin versions prior to 3.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. There is no...
PT-2023-21766 · Rocket · Unidata +1
Name of the Vulnerable Software and Affected Versions: Rocket Software UniData versions prior to 8.2.4 build 3003 Rocket Software UniVerse versions prior to 11.3.5 build 1001 Rocket Software UniVerse versions prior to 12.2.1 build 2002 Description: The issue is a stack-based buffer overflow that...
PT-2023-16437 · Hashicorp +1 · Hashicorp Vault +1
Name of the Vulnerable Software and Affected Versions: HashiCorp Vault versions prior to 1.11.9 HashiCorp Vault versions prior to 1.12.5 HashiCorp Vault versions prior to 1.13.1 Description: The issue is related to HashiCorp Vault's PKI mount issuer endpoints, which did not correctly authorize...
SUSE SLES12 Security Update : docker (SUSE-SU-2023:1625-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:1625-1 advisory. - CVE-2022-36109: Fixed a supplementary group permissions bypass bsc1205375. Update to 20.10.23-ce...
PT-2023-15309 · Unknown · Daniel Powney Multi Rating
Name of the Vulnerable Software and Affected Versions: Daniel Powney Multi Rating plugin versions = 5.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...
PT-2023-20257 · Unknown · Mehjabin Orthi Interactive Svg Image Map Builder
Name of the Vulnerable Software and Affected Versions: Mehjabin Orthi Interactive SVG Image Map Builder plugin versions = 1.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the...
PT-2023-17144 · Gitlab · Gitlab Dast Api Scanner
Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.10.x Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For versions 1.6.50...
PT-2023-17048 · Cp Plus · Cp Plus Kvms Pro
Name of the Vulnerable Software and Affected Versions: CP Plus KVMS Pro versions 2.01.0.T.190521 and prior Description: The issue concerns the leakage of sensitive credentials due to insufficient protection. Recommendations: For CP Plus KVMS Pro versions 2.01.0.T.190521 and prior, update to a...
DLA-3370-1 xrdp - security update
Bulletin has no description...
PT-2023-16747 · WordPress · Oauth Single Sign On Free +3
Name of the Vulnerable Software and Affected Versions: OAuth Single Sign On Free WordPress plugin versions prior to 6.24.2 OAuth Single Sign On Standard WordPress plugin versions prior to 28.4.9 OAuth Single Sign On Premium WordPress plugin versions prior to 38.4.9 OAuth Single Sign On Enterprise...
PT-2023-15773 · Jetbrains · Jetbrains Hub
Name of the Vulnerable Software and Affected Versions: JetBrains Hub versions prior to 2022.3.15573 JetBrains Hub version 2022.2.15572 JetBrains Hub version 2022.1.15583 Description: The issue is related to reflected XSS in dashboards. Recommendations: For versions prior to 2022.3.15573, update t...
PT-2023-27421 · Apple · Macos Ventura +1
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 Description: A path handling issue was addressed with improved validation, which may allow an app to access user-sensitive data. Recommendations: For macOS Ventura versions prior to 13.3, update to macOS...
JVN#61105618: baserCMS vulnerable to arbitrary file uploads
baserCMS provided by baserCMS Users Community allows an authenticated user to upload arbitrary files CWE-434. Impact An user with Operator privilege may upload arbitrary files. As a result, arbitrary PHP code may be executed. Solution Update the software Update the software to the latest version...
CVE-2023-25658 TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1...
CVE-2023-25667 TensorFlow vulnerable to segfault when opening multiframe gif
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when 2^31 = numframes height width channels 2^32, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...
CVE-2023-25667 TensorFlow vulnerable to segfault when opening multiframe gif
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when 2^31 = numframes height width channels 2^32, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...
CVE-2023-25801 TensorFlow has double free in Fractional(Max/Avg)Pool
TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 require the first and fourth elements of their parameter poolingratio to be equal to 1.0, as pooling on batch and channel dimensions is not supporte...