PT-2023-22588

Name of the Vulnerable Software and Affected Versions mkucej/i-librarian-free versions prior to 5.10.4 Description The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the application, which are then stored and executed by the...

PT-2023-18646

Name of the Vulnerable Software and Affected Versions Webcodin WCP Contact Form plugin versions prior to 3.1.0 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially...

PT-2023-15317

Name of the Vulnerable Software and Affected Versions Charitable Donations & Fundraising Team Donation Forms by Charitable plugin versions = 1.7.0.10 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into...

PT-2023-22186

Name of the Vulnerable Software and Affected Versions PropertyHive plugin versions 1.5.46 and earlier Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them...

CVE-2023-0580

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

PT-2023-15307

Name of the Vulnerable Software and Affected Versions Tussendoor internet & marketing Open RDW kenteken voertuiginformatie plugin versions = 2.0.14 Description The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website,...

PT-2023-5216 · N Able · N-Able Take Control Agent

Name of the Vulnerable Software and Affected Versions: N-able Take Control Agent versions 7.0.41.1141 through 7.0.42 Description: The issue is related to a Time-of-Check to Time-of-Use TOCTOU race condition in the BASupSrvcUpdater.exe service, which can be exploited via a pseudo-symlink at...

PT-2023-14637

Name of the Vulnerable Software and Affected Versions Vsourz Digital Advanced Contact form 7 DB versions 1.7.2 through 1.9.1 Description The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal...

CVE-2022-34380: Improper Authentication

Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability. A high privileged local attacker may potentially exploit this vulnerability leading to authentication bypass and access the CloudLink system console. This is critical...

PT-2022-13993

Name of the Vulnerable Software and Affected Versions ABB REX640 PCL1 ABB REX640 PCL2 ABB REX640 PCL3 Description The issue allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node due to incorrect permission assignment...

CVE-2022-1596: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node...

PT-2022-9070

Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets Linear WADWAZ-1 version 3.43 Linear WAPIRZ-1 version 3.43 Description The issue affects Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets, which do not...

CVE-2021-33700

SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of...

PT-2021-17508

Name of the Vulnerable Software and Affected Versions EasyCorp ZenTao version 12.5.3 Description A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script via various areas, such as data-link-creator. This enables attackers to potentially steal user data or take...

PT-2020-16107

Name of the Vulnerable Software and Affected Versions CMSuno version 1.6.2 Description An authenticated attacker can inject malicious code into the lang parameter in the "/uno/central.php" file and run this PHP code in the web page, potentially allowing the attacker to take control of the server...

CVE-2020-16913

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

CVE-2020-1098

An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would first have to log on ...

CVE-2020-1593: Undefined Security Weakness

A remote code execution vulnerability exists when Windows Media Audio Decoder improperly handles objects. An attacker who successfully exploited the vulnerability could take control of an affected system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM Cloud Private

Summary Multiple vulnerabilities in IBM Java Runtime affect IBM Cloud Private Vulnerability Details CVEID: CVE-2020-2805 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to take control of the system. CVSS Base...

CVE-2020-12463: Undefined Security Weakness

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files...