PT-2024-14518 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a command injection in the wget download function, allowing the execution of arbitrary commands on the operating system. Recommendations: For versions prior to 2.6.0, update to...

PT-2023-31892 · Json-Jwt · Json-Jwt

Name of the Vulnerable Software and Affected Versions: json-jwt aka JSON::JWT versions 1.15.x through 1.15.3.0 json-jwt aka JSON::JWT versions 1.16.x through 1.16.5 Description: The issue allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be us...

PT-2023-29185 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 7.13.0.10 Dell PowerProtect DD LTS versions prior to 7.7.5.25 Dell PowerProtect DD LTS versions prior to 7.10.1.15 Dell PowerProtect DD version 6.2.1.110 Description: A path traversal vulnerability exist...

PT-2023-30849 · Siemens · Sinec Ins

Name of the Vulnerable Software and Affected Versions: SINEC INS versions prior to V1.0 SP2 Update 2 Description: A vulnerability has been identified in the REST API of affected devices, where it does not check the length of parameters in certain conditions. This allows a malicious admin to crash...

PT-2023-8551 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 13.0.0 and earlier Adobe Substance 3D Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the Adobe Substance 3D Designer program, which could...

PT-2023-32393 · WordPress · Word Balloon

Name of the Vulnerable Software and Affected Versions: Word Balloon WordPress plugin versions prior to 4.20.3 Description: The issue allows an unauthenticated attacker to trick a logged-in user into deleting arbitrary avatars by clicking a link, due to a lack of protection against CSRF attacks in...

PT-2023-24646 · Really Simple Plugins · Really Simple Plugins Complianz Premium +1

Name of the Vulnerable Software and Affected Versions: Really Simple Plugins Complianz versions through 6.4.5 Really Simple Plugins Complianz Premium versions through 6.4.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Complianz and Really Simp...

PT-2023-30757 · Andrea Landonio · Taxonomy Filter

Name of the Vulnerable Software and Affected Versions: Andrea Landonio Taxonomy filter versions prior to 2.2.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the Taxonomy filter, which allows for Cross Site Request Forgery. Recommendations: For versions...

PT-2023-22033 · Unknown · Veon Computer Service Tracking

Name of the Vulnerable Software and Affected Versions: Veon Computer Service Tracking Software versions prior to 2.0 Veon Computer Service Tracking Software versions through 20231122 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special...

PT-2023-7248 · Ipswitch · Moveit Transfer +1

Name of the Vulnerable Software and Affected Versions: MOVEit Transfer versions prior to 2022.0.9 14.0.9 MOVEit Transfer versions prior to 2022.1.10 14.1.10 MOVEit Transfer versions prior to 2023.0.7 15.0.7 Description: A reflected cross-site scripting XSS vulnerability has been identified when...

PT-2023-7132 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.0 and earlier Adobe Audition versions 23.6.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocate...

PT-2023-8503 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.5.2645 build 20240116 QTS versions prior to 4.5.4.2627 build 20231225 QuTS hero versions prior to h5.1.5.2647 build 20240118 QuTS hero versions prior to h4.5.4.2626 build 20231225 QuTScloud versions prior to...

PT-2023-30205 · WordPress · Serena Villa Auto Excerpt Everywhere Plugin

Name of the Vulnerable Software and Affected Versions: Serena Villa Auto Excerpt everywhere plugin versions = 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

PT-2023-28487 · Chef · Chef Inspec

Name of the Vulnerable Software and Affected Versions: Chef InSpec versions prior to 4.56.58 Chef InSpec versions prior to 5.22.29 Description: The issue allows local command execution via maliciously crafted profiles, specifically affecting the archive, check, and export commands in Chef InSpec...

PT-2023-24881 · Itop · Itop

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 3.0.4 and 3.1.0 Description: The issue concerns cross site scripting when displaying the pages/preferences.php page in iTop, an open source, web-based IT service management platform. Recommendations: For versions prior ...

PT-2023-28650 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17.1 Apple iPadOS versions prior to 17.1 Apple macOS Sonoma versions prior to 14.1 Apple tvOS versions prior to 17.1 Apple watchOS versions prior to 10.1 Description: This issue was addressed with improved redactio...

PT-2023-29438 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 Discourse versions prior to 3.2.0.beta2 Description: Discourse is an open source community platform. In affected versions, any user can create a topic and add arbitrary custom fields to a topic. The severity ...

PT-2023-9124 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.4.2596 build 20231128 QNAP QuTS hero versions prior to 5.1.4.2596 build 20231128 Description: A buffer copy without checking the size of input issue has been reported, which could allow authenticated...

PT-2023-32062 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.1 Description: The issue is related to SQL Injection in the GitHub repository salesagility/suitecrm. Recommendations: For versions prior to 7.14.1, update to version 7.14.1 or later to resolve the issue...

PT-2023-26093 · Hashicorp +1 · Vault Enterprise +1

Name of the Vulnerable Software and Affected Versions: Vault Enterprise versions prior to 1.15.0 Vault Enterprise versions prior to 1.14.4 Vault Enterprise versions prior to 1.13.8 Description: A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resource...