PT-2023-30640 · Qode Interactive · Qode Essential Addons

Name of the Vulnerable Software and Affected Versions: Qode Essential Addons versions 1.5.2 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability. This vulnerability affects Qode Interactive Qode Essential Addons, allowing for co...

Chamilo LMS 1.11.x < 1.11.22 Multiple Vulnerabilities

Chamilo LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:chamilo:chamilolms"; if...

PT-2023-30632 · Elementor · Events Addon For Elementor

Name of the Vulnerable Software and Affected Versions: Events Addon for Elementor versions 2.1.3 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certa...

PT-2023-30756 · Unknown · Super Blog Me Broken Link Checker For Youtube

Name of the Vulnerable Software and Affected Versions: Super Blog Me Broken Link Checker for YouTube versions 1.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. This is a type of attack where an attacker tricks a user into...

PT-2023-30786 · Unknown · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager versions n/a through 6.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2023-26459 · WordPress · Campaign Monitor For Wordpress

Name of the Vulnerable Software and Affected Versions: Campaign Monitor for WordPress versions through 2.8.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2023-30794 · Unknown · Daext League Table

Name of the Vulnerable Software and Affected Versions: DAEXT League Table versions 1.13 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This vulnerability affects the DAEXT League...

PT-2023-26161 · WordPress · The Kb Support – Wordpress Help Desk/Knowledge Base

Name of the Vulnerable Software and Affected Versions: KB Support – WordPress Help Desk and Knowledge Base versions 1.5.88 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Users with a ro...

PT-2023-26149 · Unknown · Leap13 Premium Addons Pro

Name of the Vulnerable Software and Affected Versions: Leap13 Premium Addons PRO versions 2.9.0 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not...

PT-2023-29590 · Unknown · Contact Form – Custom Builder

Name of the Vulnerable Software and Affected Versions: Contact Form – Custom Builder, Payment Form, and More versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for Stored XS...

PT-2023-30533 · WordPress · Registrationmagic

Name of the Vulnerable Software and Affected Versions: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login versions n/a through 5.2.2.6 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. The estimated...

Ubuntu: Security Advisory (USN-6526-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-30706 · Ezviz +1 · Ezviz Cs-C6Cn +3

Name of the Vulnerable Software and Affected Versions: Ezviz CS-C6N-xxx versions prior to v5.3.x build 20230401 Ezviz CS-CV310-xxx versions prior to v5.3.x build 20230401 Ezviz CS-C6CN-xxx versions prior to v5.3.x build 20230401 Ezviz CS-C3N-xxx versions prior to v5.3.x build 20230401 Hikvision...

PT-2023-7688 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.109 Description: The issue is related to a use after free in WebRTC, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code...

PT-2023-20932 · WordPress · Gappointments

Name of the Vulnerable Software and Affected Versions: gAppointments WordPress plugin versions 1.9.5.1 and earlier Description: The issue concerns the gAppointments WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high-privilege users, such as...

PT-2023-24483 · Veribase · Veribase

Name of the Vulnerable Software and Affected Versions: Veribase versions through 20231123 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vendor was contacted...

PT-2023-30437 · Admidio · Admidio

Name of the Vulnerable Software and Affected Versions: Admidio versions 4.2.12 and below Description: The issue is related to Cross Site Scripting XSS, which is a type of attack that can be used to steal user data or take control of user sessions. Recommendations: For Admidio versions 4.2.12 and...

PT-2023-7196 · Ibm · Ibm Qradar Wincollect Agent

Name of the Vulnerable Software and Affected Versions: IBM QRadar WinCollect Agent versions 10.0 through 10.1.7 Description: The issue is related to insufficient protection of service data, which could allow a privileged user to obtain sensitive information due to missing best practices. This cou...

PT-2023-32460

Name of the Vulnerable Software and Affected Versions Botanik Software Pharmacy Automation versions prior to 2.1.133.0 Description The issue allows exposure of private personal information to an unauthorized actor, enabling the retrieval of embedded sensitive data. Recommendations For versions...

KLA62090 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Memor...