PT-2023-22962 · Kb-Ahr08D +3 · Kb-Ahr08D +5

Name of the Vulnerable Software and Affected Versions: KB-AHR04D versions prior to 91110.1.101106.78 KB-AHR08D versions prior to 91210.1.101106.78 KB-AHR16D versions prior to 91310.1.101106.78 KB-IRIP04A versions prior to 95110.1.100290.78A KB-IRIP08A versions prior to 95210.1.100290.78A KB-IRIP1...

PT-2023-15186 · Repute Infosystems · Armember

Name of the Vulnerable Software and Affected Versions: Repute InfoSystems ARMember plugin versions prior to 4.0.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-22044 · Stpetedesign · Stpetedesign Call Now Accessibility Button

Name of the Vulnerable Software and Affected Versions: StPeteDesign Call Now Accessibility Button plugin versions = 1.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject...

PT-2023-14772 · Galleryplugins · Galleryplugins Video Contest

Name of the Vulnerable Software and Affected Versions: GalleryPlugins Video Contest plugin versions prior to 3.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For GalleryPlugins Video...

PT-2023-25106 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Description: The issue allows remote code execution by...

Medium: libssh

Issue Overview: A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. CVE-2023-1667 A vulnerability was found in libssh, where the authentication check of the connecting client can be...

Low: gnuplot

Issue Overview: A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash. CVE-2021-44917 Affected Packages: gnuplot Issue Correction: Run dnf update gnuplot --releasever 2023.0.20230607 or dnf upda...

PT-2023-16351 · WordPress · Hostel

Name of the Vulnerable Software and Affected Versions: Hostel WordPress plugin versions prior to 1.1.5.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in a...

PT-2023-20263 · WordPress · Quiz Maker

Name of the Vulnerable Software and Affected Versions: The Quiz Maker WordPress plugin versions prior to 6.4.2.7 Description: The issue is related to Reflected Cross-Site Scripting, which occurs because some parameters are not properly escaped before being outputted back in attributes. This could...

PT-2023-10016 · WordPress · Exit Box Lite Plugin

Name of the Vulnerable Software and Affected Versions: Exit Box Lite Plugin versions up to 1.06 Description: A problematic vulnerability was found in the Exit Box Lite Plugin, affecting the exitboxadmin function of the wordpress-exit-box-lite.php file. This vulnerability leads to cross-site reque...

SUSE CVE-2023-33966

Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and denoruntime 0.114.0, outbound HTTP requests made using the built-in node:http or node:https modules are incorrectly not checked against the network permission allow list --allow-net. Dependencies relying on these built-in modules...

PT-2023-19319 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to an Elevation of Privilege vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version...

PT-2023-24664 · Unknown +1 · Kubernetes +3

Name of the Vulnerable Software and Affected Versions: Kyverno versions prior to 1.10.0 Description: The issue allows resources with the deletionTimestamp field defined to bypass validate, generate, or mutate-existing policies, even when the validationFailureAction field is set to Enforce. This...

PT-2023-24370 · Kramerav · Kramerav Via Go²

Name of the Vulnerable Software and Affected Versions: KramerAV VIA GO² versions prior to 4.0.1.1326 Description: The issue is related to SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

Important: kernel

Issue Overview: A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in tableclear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component. CVE-2023-2269 In the Linux kernel through 6.3.1, a use-after-free in...

PT-2023-15018 · WordPress · Osm Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: OSM WordPress plugin versions through 6.01 Description: The issue concerns the OSM WordPress plugin, where it fails to validate and escape certain shortcode attributes. This could allow users with a role as low as contributor to perform a...

PT-2023-19138 · Unknown · Chris Reynolds Progress Bar Plugin

Name of the Vulnerable Software and Affected Versions: Chris Reynolds Progress Bar plugin versions = 2.2.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. Recommendations: For Chris Reynolds Progress B...

PT-2023-24295 · Unknown · Eventprime

Name of the Vulnerable Software and Affected Versions: EventPrime plugin versions = 2.8.6 Description: The issue is related to an Unauth. Reflected XSS Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to ste...

PT-2023-24222 · André Bräkling · André Bräkling Wp-Matomo Integration

Name of the Vulnerable Software and Affected Versions: André Bräkling WP-Matomo Integration WP-Piwik plugin versions prior to 1.0.28 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For André...

CVE-2023-33184 Blind SSRF in the Nextcloud Mail app on avatar endpoint

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3...