PT-2023-6426 · Fortinet · Fortisoar

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSOAR versions 7.3.0 through 7.3.1 Description: The issue is related to an improper neutralization of special elements used in a template engine, which allows an authenticated, remote attacker to execute arbitrary code via a...

PT-2023-6607 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability in memory, which could allow an attacker to bypass the Address Space Layout Randomization ASLR protection mechanism. This...

PT-2023-6475 · Adobe · Acrobat Document Cloud +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat Reader versions 20.005.30441 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Adobe Acrobat Document Cloud Adobe Acrobat Reader Document Cloud Description: The issue...

PT-2023-5164 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient versions 6.0.0 through 6.0.10 Fortinet FortiClient versions 6.2.0 through 6.2.9 Fortinet FortiClient versions 6.4.0 through 6.4.9 Fortinet FortiClient versions 7.0.0 through 7.0.7 Description: The issue is related to...

PT-2023-6620 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability. This could allow an attacker to disclose sensitive memory, potentially bypassing mitigations like ASLR. Exploitation requires...

Important: tar

Issue Overview: GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximate...

PT-2023-19356 · Link Software Llc · Wp Terms Popup

Name of the Vulnerable Software and Affected Versions: Link Software LLC WP Terms Popup plugin versions = 2.6.0 Description: The issue is related to an Authenticated admin+ Cross-Site Scripting XSS vulnerability. This means that an attacker with administrative access could potentially inject...

PT-2023-19288 · Creativethemes · Blocksy Companion

Name of the Vulnerable Software and Affected Versions: CreativeThemes Blocksy Companion plugin versions prior to 1.8.68 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher permissions. Recommendations: For CreativeTheme...

PT-2023-20027 · Unknown · Mybatis Plus

Name of the Vulnerable Software and Affected Versions: Mybatis plus versions prior to 3.5.3.1 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the tenant ID value. This can occur in misconfigured applications. The documentation provides guidance on...

PT-2023-19269 · Wpdevart · Wpdevart Responsive Vertical Icon Menu Plugin

Name of the Vulnerable Software and Affected Versions: wpdevart Responsive Vertical Icon Menu plugin versions 1.5.8 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication with admin or higher privileges...

PT-2023-16689

Name of the Vulnerable Software and Affected Versions Vira-Investing versions prior to 1.0.84.86 Description The issue is related to improper protection for outbound error messages and alert signals, allowing account footprinting. This can potentially reveal sensitive information about user...

PT-2023-17189

Name of the Vulnerable Software and Affected Versions deepset-ai/haystack versions prior to 0.1.30 deepset-ai/haystack version 1.15.0 and prior Description The issue is related to the use of hard-coded, security-relevant constants in the GitHub repository deepset-ai/haystack. A patch is available...

PT-2023-2180 · Nginx · Nginx Agent

Name of the Vulnerable Software and Affected Versions: NGINX Agent versions 2.0 through 2.23.2 Description: The issue is related to insufficient protection of registration data, which may allow an attacker to gain access to private keys. This can occur when an authenticated attacker with local...

PT-2023-21050 · Ibm · Ibm Aspera Connect +1

Name of the Vulnerable Software and Affected Versions: IBM Aspera Cargo version 4.2.5 IBM Aspera Connect version 4.2.5 Description: The issue is caused by improper bounds checking, leading to a buffer overflow. An attacker could exploit this to execute arbitrary code on the system. Recommendation...

PT-2023-21442 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: An out-of-bounds read was addressed with improved input validation. Processing an image may result in disclosure of process memory. Recommendations: For versions prior to 13.3, update to macOS Ventura...

PT-2023-16316 · WordPress · Ht Politic Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: HT Politic WordPress plugin versions prior to 2.3.8 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF...

PT-2023-12649 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible incorrect file read due to a confused deputy in the isBluetoothShareUri function of BluetoothOppUtility.java. This could lead to local information...

PT-2023-19519 · Softmaker Software Gmbh · Flexipdf

Name of the Vulnerable Software and Affected Versions: SoftMaker Software GmbH FlexiPDF version 3.0.3.0 Description: A stack overflow in FlexiPDF allows attackers to execute arbitrary code after opening a crafted PDF file. Recommendations: For SoftMaker Software GmbH FlexiPDF version 3.0.3.0,...

PT-2023-19146 · Awsm Innovations · Awsm Innovations Embed Any Document – Embed Pdf

Name of the Vulnerable Software and Affected Versions: Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin versions = 2.7.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. It...

PT-2023-21846 · Omicron · Omicron Stationguard +1

Name of the Vulnerable Software and Affected Versions: OMICRON StationGuard versions 1.10 through 2.20 OMICRON StationScout versions 1.30 through 2.20 Description: The issue allows an attacker to bypass intended access restrictions due to incorrect authorization. Recommendations: For OMICRON...