Medium: zsh

Issue Overview: A vulnerability was found in zsh in the parsecolorchar function of prompt.c file. This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by a %F%K argument. This occurs because of recursive PROMPTSUBST expansion...

Medium: fribidi

Issue Overview: A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service. CVE-2022-25308 A heap-based buffer overflow flaw was found i...

Important: cups

Issue Overview: An authorization vulnerability was found in the CUPS printing system. This security vulnerability occurs when local authorization happens. This flaw allows an attacker to authenticate to CUPS as root/admin without the 32-byte secret key and perform arbitrary code execution...

Medium: libtiff

Issue Overview: There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1. CVE-2022-2519 A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

Low: openjpeg2

Issue Overview: There is a flaw in the opj2compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2compress, could trigger a heap out-of-bounds write due to an integer overflow, which is caused by the large number of ima...

PT-2023-16886 · Cloudflare · Cloudflared

Name of the Vulnerable Software and Affected Versions: cloudflared versions = 2023.3.0 Description: A vulnerability has been discovered in cloudflared's installer for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affect...

PT-2023-20687

Name of the Vulnerable Software and Affected Versions Samsung Baseband Modem Chipset for Exynos Modem 5123 Samsung Baseband Modem Chipset for Exynos Modem 5300 Samsung Baseband Modem Chipset for Exynos 980 Samsung Baseband Modem Chipset for Exynos 1080 Samsung Baseband Modem Chipset for Exynos Au...

PT-2023-20310 · WordPress · Wp-Master.Ir Feed Changer & Remover

Name of the Vulnerable Software and Affected Versions: WP-master.Ir Feed Changer & Remover plugin versions 0.2 and earlier Description: The issue is related to an authentication bypass and Cross-Site Scripting XSS vulnerability. This allows for potential malicious script injection, affecting the...

PT-2023-21842

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.169 Description The issue allows for XSS via event-graph node tooltips in the js/event-graph.js file. Recommendations For versions prior to 2.4.169, update to version 2.4.169 or later to resolve the issue...

PT-2023-13667 · WordPress · Themekraft Post Form

Name of the Vulnerable Software and Affected Versions: ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin versions = 2.7.5 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability. This means that an attacker ca...

PT-2023-18227 · Unknown · Decon Driver

Name of the Vulnerable Software and Affected Versions: decon driver versions prior to SMR Mar-2023 Release 1 Description: The issue is related to a use after free vulnerability in the decon driver, which allows attackers to cause a memory access fault. Recommendations: For versions prior to SMR...

PT-2023-20262 · Plainware · Store Locator

Name of the Vulnerable Software and Affected Versions: Plainware Locatoraid Store Locator plugin versions = 3.9.11 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a we...

PT-2023-21558 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.7 OpenSIPS versions prior to 3.2.4 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. A specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected w...

PT-2023-1904 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension when parsing a crafted file. This could result in reading past the end of an allocated memory structure,...

PT-2023-1924 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could...

PT-2023-1922 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability when processing USD files, which could allow an attacker to execute arbitrary code using a specially crafted malicious file...

PT-2023-16092 · WordPress · Fluentsmtp

Name of the Vulnerable Software and Affected Versions: FluentSMTP WordPress plugin versions prior to 2.2.3 Description: The issue arises from the plugin's failure to sanitize or escape email content, making it susceptible to stored cross-site scripting attacks XSS when an administrator views the...

PT-2025-18820 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A system hang was observed due to the IOCB counts being out of order, blocking commands and subsequently hanging the system. The issue was resolved by synchronizing the IOCB count ...

PT-2023-20378 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.4 Description: The issue is related to a null pointer reference vulnerability in the bundle management subsystem. This can be exploited by local attackers to cause a denial-of-service DoS attack on the system...

PT-2023-16782 · Unknown · Btcpay Server

Name of the Vulnerable Software and Affected Versions: btcpayserver/btcpayserver versions prior to 1.8.0 Description: The issue is related to improper neutralization of equivalent special elements. There is no information provided about the estimated number of potentially affected devices worldwi...