PT-2023-29585 · Unknown · Scott Reilly Get Custom Field Values

Name of the Vulnerable Software and Affected Versions: Scott Reilly Get Custom Field Values plugin versions = 4.0.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts...

PT-2023-29391 · WordPress · Kardi Order Auto Complete For Woocommerce

Name of the Vulnerable Software and Affected Versions: Kardi Order auto complete for WooCommerce plugin versions = 1.2.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the Kardi...

RHEL 9 : java-17-openjdk (RHSA-2023:5753)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5753 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...

Oracle MySQL Server 8.x <= 8.0.34 Security Update (cpuoct2023) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

Ubuntu: Security Advisory (USN-6394-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-59705 CVE-2023-45803 affecting package python3 for versions less than 3.9.19-14

urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body like POST to GET as is required by HT...

Advisory ROSA-SA-2023-2247

software: openexr 2.5.8 OS: ROSA-CHROME packageevrstring: openexr-2.5.8-1.src.rpm CVE-ID: CVE-2021-23169 BDU-ID: 2021-04603 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the copyIntoFrameBuffer function of the OpenEXR wide dynamic range luminance image storage software is related to writing beyo...

PT-2023-28380 · Unknown · Onsinview2

Name of the Vulnerable Software and Affected Versions: OnSinView2 versions 2.0.1 and earlier Description: An issue with improper restriction of operations within the bounds of a memory buffer exists. If exploited, this could lead to information disclosure or the execution of arbitrary code by...

Amazon Corretto Java 8.x < 8.392.08.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 8 8.392.08.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2023-Oct-17 advisory. - other-libs/corba CVE-2023-22067 - security-libs/javax.net.ssl CVE-2023-22081 Note that Nessus has no...

PT-2023-29618 · Unknown · Caret Country Access Limit

Name of the Vulnerable Software and Affected Versions: Caret Country Access Limit plugin versions prior to 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application...

PT-2023-29626 · Unknown · Fla-Shop.Com Html5 Maps

Name of the Vulnerable Software and Affected Versions: Fla-shop.Com HTML5 Maps plugin versions = 1.7.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-29330 · Robin Wilson · Bbp Style Pack Plugin

Name of the Vulnerable Software and Affected Versions: Robin Wilson bbp style pack plugin versions 5.6.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or those with higher authentication levels...

PT-2023-29331 · Cytech · Cytech Buddymeet Plugin

Name of the Vulnerable Software and Affected Versions: Cytech BuddyMeet plugin versions = 2.2.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can then be execute...

PT-2023-28703 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 31.7.2 Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Description: A Cross Site Request Forgery CSRF issue in the Chalet application allows attackers to run arbitrary code...

PT-2023-29476 · WordPress · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System plugin versions = 2.9.9.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

PT-2023-29474 · Unknown · Hitsteps Web Analytics

Name of the Vulnerable Software and Affected Versions: Hitsteps Web Analytics plugin versions = 5.86 Description: A Cross-Site Request Forgery CSRF issue affects the Hitsteps Web Analytics plugin. This type of issue allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-6309 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S8-EVO Juniper Networks Junos OS Evolved version 21.1R1-EVO and later Juniper Networks Junos OS Evolved versions prior to 21.2R3-S6-EVO Juniper Networks Junos OS Evolved version...

Lenovo System Update Vulnerability - Lenovo Support US

No description provided...

PT-2023-28070 · WordPress · Sendpress Newsletters

Name of the Vulnerable Software and Affected Versions: SendPress Newsletters plugin versions 1.22.3.31 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

PT-2023-28120 · Softaculous · Wpcentral

Name of the Vulnerable Software and Affected Versions: Softaculous Ltd. WpCentral plugin versions = 1.5.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...