PT-2023-34781 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.5 through v6.1.7 Description: A potential NULL dereference issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v6.1.5 through...

PT-2023-34754 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.1.7 Description: A use-after-free and race condition issue was discovered in the fastrpc map find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-19059 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code or crash the device remotely. Recommendations: For Snap One Wattbox...

PT-2023-12863 · Netiq · Netiq Identity Manager

Name of the Vulnerable Software and Affected Versions: NetIQ Identity Manager versions prior to 4.8.5 Description: The issue allows an attacker to determine whether a file exists on the filesystem. This is a file existence disclosure vulnerability in the NetIQ Identity Manager plugin...

PT-2023-14679 · WordPress · Optimize Images Alt Text (Alt Tag) & Names For Seo Using Ai

Name of the Vulnerable Software and Affected Versions: Optimize images ALT Text & names for SEO using AI WordPress plugin versions prior to 2.0.8 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CS...

PT-2023-14894 · WordPress · Product Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Slider for WooCommerce WordPress plugin versions prior to 2.6.4 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users suc...

PT-2023-14528 · WordPress · Search & Filter

Name of the Vulnerable Software and Affected Versions: Search & Filter WordPress plugin versions prior to 1.2.16 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admin, du...

PT-2023-14368 · WordPress · Cbx Petition

Name of the Vulnerable Software and Affected Versions: CBX Petition for WordPress plugin versions 1.0.3 and earlier Description: The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticate...

PT-2023-14470 · WordPress · Brutebank

Name of the Vulnerable Software and Affected Versions: BruteBank WordPress plugin versions prior to 1.9 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: For versions...

PT-2023-16266

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev40 Description The issue is related to improper input validation. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2023-1169 · Libtiff +10 · Libtiff +10

Name of the Vulnerable Software and Affected Versions: LibTIFF versions through 4.5.0 Description: The issue is related to a heap-based buffer overflow in the processCropSelections function of the tools/tiffcrop.c file in the LibTIFF library. This can be exploited by a remote attacker via a craft...

PT-2023-14692 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions 1.6.0 and earlier Description: A reflected-XSS issue was discovered in the article publish component. The issue is related to the cookie ENV LIST URL. Recommendations: For EyouCMS versions 1.6.0 and earlier, update to a versi...

PT-2023-16243 · WordPress · Social Warfare

Name of the Vulnerable Software and Affected Versions: Social Warfare plugin for WordPress versions up to, and including, 4.3.0 Description: The issue is related to authorization bypass due to a missing capability check on several AJAX actions. This allows authenticated attackers with...

PT-2023-8492 · WordPress · Tc Ultimate Wp Query Search Filter

Name of the Vulnerable Software and Affected Versions: TC Ultimate WP Query Search Filter plugin versions = 1.0.10 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It is associated with the failure to protect the structure of web pages, which could allow a remote...

CVE-2023-22733 Improper Output Neutralization in Log Module in shopware

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all kind of sent mails. An attacker with access to either the local system logs or a centralized logging store may have access to other users accounts. This issu...

PT-2023-33821 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential memory leak issue exists in the configfs create dir function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33419 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue is related to a null pointer dereference in the network phy probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33232 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a function prototype mismatch in the snd seq expand var event function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2023-33142 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns handling attempts to delete multipath routes when fib info contains an nh reference. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2023-33304 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to the use of kzalloc in fbcon prepare logo. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...