PT-2023-25675 · WordPress · Wp Content Copy Protection & No Right Click

Name of the Vulnerable Software and Affected Versions: WP-buy WP Content Copy Protection & No Right Click plugin versions = 3.5.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can...

PT-2023-24849 · Joseph C Dolson · My Content Management

Name of the Vulnerable Software and Affected Versions: Joseph C Dolson My Content Management plugin versions 1.7.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions...

PT-2023-24322 · Unknown · Connected Io

Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue allows attackers to exfiltrate credentials and use them to impersonate devices, as passwords and credentials are kept in clear-text format. Recommendations: For Connected IO version...

PT-2023-24445 · Unknown · Ai-Dev Aioptimizedcombinations

Name of the Vulnerable Software and Affected Versions: ai-dev aioptimizedcombinations versions prior to 0.1.3 Description: The issue is a SQL injection vulnerability via the component /includes/ajax.php. This vulnerability can be exploited, potentially allowing unauthorized access to database...

PT-2023-25482 · Unknown · Barebones Cms

Name of the Vulnerable Software and Affected Versions: Barebones CMS version 2.0.2 Description: The issue concerns Stored Cross-Site Scripting XSS that occurs when an authenticated user interacts with certain features on the admin panel. Recommendations: For Barebones CMS version 2.0.2, update to...

Vulnerability fixed in Ivanti Endpoint Manager

Ivanti has fixed a vulnerability in Endpoint Manager. A malicious person with administrator privileges can exploit the vulnerability exploit to execute arbitrary OS commands with, among other among other things, permissions from the tomcat process. This vulnerability is different from the...

Low: sqlite

Issue Overview: No CVE associated with this advisory Affected Packages: sqlite Issue Correction: Run dnf update sqlite --releasever 2023.1.20230725 or dnf update --advisory ALAS2023-2023-264 --releasever 2023.1.20230725 to update your system. More information on how to update your system can be...

PT-2023-8692 · Amanda +2 · Amanda +2

Name of the Vulnerable Software and Affected Versions: AMANDA versions prior to 3.5.4 Description: The issue is related to the mishandling of argument checking for runtar.c in the AMANDA software, which can be exploited to elevate privileges. This is a different issue than previously reported...

PT-2023-24634 · Unknown · Five Star Restaurant Reservations

Name of the Vulnerable Software and Affected Versions: Five Star Restaurant Reservations plugin versions = 2.6.7 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-23793 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS versions prior to 2303 9.4.1141 Description: The issue allows an unauthenticated malicious user with local access to the device to read sensitive information written to the log files. Recommendations: For Dell Wyse ThinOS...

PT-2023-4580 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to gain direct access to any...

PT-2023-20101 · WordPress · Mike Martel Wp Tiles

Name of the Vulnerable Software and Affected Versions: Mike Martel WP Tiles plugin versions 1.1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-19115 · WordPress · Muneeb Layer Slider

Name of the Vulnerable Software and Affected Versions: Muneeb Layer Slider plugin versions = 1.1.9.7 Description: A Cross-Site Request Forgery CSRF issue affects the Muneeb Layer Slider plugin. This type of issue allows an attacker to perform unintended actions on a user's behalf. Recommendations...

PT-2023-4837 · Asus · Asus Rt-Ac86U +2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX55 versions affected versions not specified ASUS RT-AX56U V2 versions affected versions not specified ASUS RT-AC86U versions affected versions not specified Description: The issue is related to a format string vulnerability in the...

PT-2023-6917 · Phoenix · Winflash Driver

Name of the Vulnerable Software and Affected Versions: WinFlash Driver versions prior to 4.5.0.0 TdkLib64.sys affected versions not specified Description: The issue is related to insufficient access control in the Phoenix WinFlash Driver on Windows, allowing privilege escalation and modification ...

PT-2023-24656 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.6.12695.3 Description: The issue is related to an unchecked parameter value in M-Files Server, which allows an anonymous user to cause a denial of service. Recommendations: For versions prior to 23.6.12695....

PT-2023-25410 · Unknown · Insider Threat Management Server

Name of the Vulnerable Software and Affected Versions: Insider Threat Management Server versions prior to 7.14.3 Description: A missing authorization check in the MacOS agent configuration endpoint enables an anonymous attacker on an adjacent network to obtain sensitive information. The attacker...

PT-2023-22612 · Openwb · Openwb

Name of the Vulnerable Software and Affected Versions: OpenWB versions 1.6 through 1.7 Description: The issue allows remote attackers to run arbitrary commands via crafted GET requests, potentially leading to command injection attacks. Recommendations: For OpenWB versions 1.6 through 1.7, update ...

PT-2023-22039 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2021 through 2023 Description: The issue allows an attacker to use a specific executable file as an execution and/or persistence mechanism, potentially executing a malicious program each time the executable file ...

PT-2023-20114 · Vaadin · Vaadin

Name of the Vulnerable Software and Affected Versions: Vaadin versions 10.0.0 through 10.0.22 Vaadin versions 11.0.0 through 14.10.0 Vaadin versions 15.0.0 through 22.0.28 Vaadin versions 23.0.0 through 23.3.12 Vaadin versions 24.0.0 through 24.0.5 Vaadin versions 24.1.0.alpha1 through 24.1.0.bet...