PT-2023-1113 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe InDesign that could lead to disclosure of sensitive memory. An attacker could...

PT-2023-16049 · WordPress · Cpo Companion

Name of the Vulnerable Software and Affected Versions: CPO Companion plugin for WordPress versions up to, and including, 1.0.4 Description: The issue is related to Stored Cross-Site Scripting via several content type settings parameters due to insufficient input sanitization and output escaping...

PT-2023-14176 · WordPress · Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: Slimstat Analytics WordPress plugin versions prior to 4.9.3 Description: The issue allows unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged-in admins viewing the logs, due to the plugin's failure to...

PT-2023-13509 · Zoom · Zoom Rooms For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for macOS versions prior to 5.11.4 Description: The issue concerns an insecure key generation mechanism in Zoom Rooms for macOS. Specifically, the encryption key used for Inter-Process Communication IPC between the Zoom Rooms daemo...

Intel Wireless Bluetooth and Killer Bluetooth for Windows Advisory - Lenovo Support US

No description provided...

AMD Chipset Driver Information Disclosure Vulnerability - Lenovo Support US

No description provided...

PT-2023-14816 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.14 on the stable branch and version 2.9.0.beta15 on the beta and tests-passed branches Description: Discourse is an open-source discussion platform. Prior to the specified versions, recipients of a group SMTP...

PT-2022-28148 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper handling of insufficient permissions or privileges. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2022-28010 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. This...

PT-2022-6722 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.2.5-8227-6 Synology Router Manager versions prior to 1.3.1-9346-3 Description: The issue is related to improper neutralization of special elements used in an OS command, allowing man-in-the-middle...

PT-2022-6657 · Fuji Electric · Fuji Electric Tellus Lite V-Simulator

Name of the Vulnerable Software and Affected Versions: Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior Description: The issue is related to an out-of-bounds write in memory, which may allow an attacker to execute arbitrary code. This can be exploited by an attacker to gain...

PT-2022-25020 · WordPress · Checkout For Paypal

Name of the Vulnerable Software and Affected Versions: The Checkout for PayPal WordPress plugin versions prior to 1.0.14 Description: The issue is related to the plugin not validating and escaping some of its shortcode attributes before outputting them back in the page. This could allow users wit...

PT-2022-8697 · Unknown · Easywebpack-Cli

Name of the Vulnerable Software and Affected Versions: easywebpack-cli versions prior to 4.5.2 Description: A Directory Traversal issue allows attackers to obtain sensitive information by sending a crafted GET request. Recommendations: For versions prior to 4.5.2, update to version 4.5.2 or later...

PT-2022-6898 · Unknown · Hutool-Json

Name of the Vulnerable Software and Affected Versions: hutool-json version 5.8.10 Description: The issue is related to a stack overflow in the org.json.JSONTokener.nextValue component of the hutool-json library, which can be exploited to cause a Denial of Service DoS via crafted JSON or XML data...

PT-2022-27834 · Siemens · Scalance X204Rna Eec +1

Name of the Vulnerable Software and Affected Versions: SCALANCE X204RNA HSR versions prior to V3.2.7 SCALANCE X204RNA PRP versions prior to V3.2.7 SCALANCE X204RNA EEC HSR versions prior to V3.2.7 SCALANCE X204RNA EEC PRP versions prior to V3.2.7 SCALANCE X204RNA EEC PRP/HSR versions prior to...

PT-2022-6392 · Schneider Electric · Apc Easy Ups Online Monitoring +1

Name of the Vulnerable Software and Affected Versions: APC Easy UPS Online Monitoring Software versions prior to V2.5-GA APC Easy UPS Online Monitoring Software versions prior to V2.5-GA-01-22261 Schneider Electric Easy UPS Online Monitoring Software versions prior to V2.5-GS Schneider Electric...

CVE-2022-3509

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

Code injection

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown...

PT-2022-24704 · WordPress · Easy Form Builder

Name of the Vulnerable Software and Affected Versions: Easy Form Builder WordPress plugin versions prior to 3.4.0 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised a...

PT-2022-7190 · WordPress · Essential Real Estate

Name of the Vulnerable Software and Affected Versions: Essential Real Estate WordPress plugin versions prior to 3.9.6 Description: The issue is related to the lack of sanitization and escaping of some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting...