PT-2023-26531 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue allows an app to execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. Recommendations: For versions prior to 14, update to macOS...

PT-2023-8480 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to a component of the macOS operating system and involves reading beyond memory boundaries. Processing a file may lead to a denial-of-service or potentially disclose memory contents...

PT-2023-5445 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.12.0 Description: The issue is related to an argument injection to the installer in Docker Desktop on Windows, which may result in local privilege escalation. This allows an attacker to potentially elevate...

PT-2023-28334 · Froala · Froala Editor

Name of the Vulnerable Software and Affected Versions: Froala Editor version 4.1.1 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary code via the Insert link parameter in the Insert Image component. This enables attackers to inject malicious code,...

PT-2023-28133 · Xtemos · Xtemos Woodmart

Name of the Vulnerable Software and Affected Versions: Xtemos WoodMart plugin versions prior to 7.2.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing the...

PT-2023-28130 · Codestag · Codestag Stagtools

Name of the Vulnerable Software and Affected Versions: Codestag StagTools plugin versions = 2.3.7 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user...

PT-2023-28787 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: cmsmadesimple version 2.2.18 Description: A Cross-Site Scripting XSS issue allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User, or Database Port components. Recommendations: F...

PT-2023-28187 · Avirtum · Avirtum Ifolders Plugin

Name of the Vulnerable Software and Affected Versions: Avirtum iFolders plugin versions prior to 1.5.0 Description: The issue is related to an Authenticated admin+ Cross-Site Scripting XSS vulnerability. This means that an attacker who has admin access can inject malicious scripts into the websit...

PT-2023-28189 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Essential Addons for Elementor versions through 5.8.8 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the Essential Addons for Elementor plugin. It is estimated that over 1 million active...

PT-2023-16825

Name of the Vulnerable Software and Affected Versions LibFoo versions 2.0 through 2.5 Description The issue allows attackers to execute arbitrary code with specific payloads, potentially leading to remote code execution vulnerabilities. This can result in system compromise. It is estimated that a...

PT-2023-31249 · Unknown · Greenradius

Name of the Vulnerable Software and Affected Versions: GreenRADIUS versions prior to 5.1.2.2 Description: A cross site scripting issue was discovered with the pagination function on the "Client-based Authentication Policy Configuration" screen of the GreenRADIUS web admin interface...

PT-2023-4791 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.179 Description: The issue is related to an out of bounds memory access in the FedCM component of Google Chrome, allowing a remote attacker who has compromised the renderer process to perform an out ...

PT-2023-27324 · WordPress · Wp 404 Auto Redirect To Similar Post

Name of the Vulnerable Software and Affected Versions: hwk-fr WP 404 Auto Redirect to Similar Post plugin versions 1.0.3 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject...

PT-2023-25083 · WordPress · Rbs Image Gallery

Name of the Vulnerable Software and Affected Versions: Rbs Image Gallery WordPress plugin versions prior to 3.2.16 Description: The issue concerns the Rbs Image Gallery WordPress plugin, where certain settings are not properly sanitized and escaped. This could allow high-privilege users, such as...

PT-2023-5342 · Librey · Librey

Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit 8f9b9803f231e2954e5b49987a532d28fe50a627 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the image proxy.php file. This vulnerability allows remote attackers to use the...

PT-2023-19573 · Unknown · Web-Settler Image Social Feed

Name of the Vulnerable Software and Affected Versions: Web-Settler Image Social Feed plugin versions 1.7.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.7.6 and...

PT-2023-5227 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to the use of hard-coded credentials in the SEL-5037 SEL Grid Configurator, which allows authentication bypass. Fo...

PT-2023-4681 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 30991 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to sensitive information disclosure due to excessive collection of system information. This is caused by...

PT-2023-27410 · WordPress · Simple Blog Card

Name of the Vulnerable Software and Affected Versions: Simple Blog Card WordPress plugin version 1.32 and earlier Description: The issue allows any authenticated user to retrieve arbitrary post titles and their content, including drafts, private posts, and password-protected ones, because the...

PT-2023-19563 · WordPress · Davidsword Mobile Call Now & Map Buttons

Name of the Vulnerable Software and Affected Versions: Davidsword Mobile Call Now & Map Buttons plugin versions 1.5.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects th...