PT-2023-24630 · Unknown · Shopconstruct

Name of the Vulnerable Software and Affected Versions: ShopConstruct plugin versions 1.1.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the ShopConstruct plugin...

PT-2023-26239 · WordPress · Artem Abramovich Art Decoration Shortcode

Name of the Vulnerable Software and Affected Versions: Artem Abramovich Art Decoration Shortcode plugin versions 1.5.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher authentication levels. There is no...

PT-2023-30068 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository instantsoft/icms2. Recommendations: For versions prior to 2.16.1-git, update to version...

PT-2023-5771 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 32047 Description: The issue is related to sensitive information disclosure due to missing authorization. This may allow an attacker to gain unauthorized access to protected information. Recommendations:...

PT-2023-30080 · Icms2 · Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of attack where an attacker injects malicious code into a website, and the website reflects the code back to...

PT-2023-5166 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: FortiClientEMS versions 7.0.0 through 7.0.4 FortiClientEMS versions 7.0.6 through 7.0.7 FortiClientEMS versions 6.4 and earlier FortiClientEMS versions 6.2 and earlier Description: The issue is related to an exposure of sensitive information ...

PT-2023-24725 · Unknown · Alan Tien Call Now Icon Animate

Name of the Vulnerable Software and Affected Versions: Alan Tien Call Now Icon Animate plugin versions 0.1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. There is no information provided about...

PT-2023-24288 · WordPress · Woocommerce Returns/Warranty Requests

Name of the Vulnerable Software and Affected Versions: WooCommerce Returns and Warranty Requests plugin versions = 2.1.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-21260 · Unknown · Mrdemonwolf Livestream Notice

Name of the Vulnerable Software and Affected Versions: MrDemonWolf Livestream Notice plugin versions 1.2.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the MrDemonWo...

PT-2023-20073 · WordPress · Ian Sadovy Wordpress Tables Plugin

Name of the Vulnerable Software and Affected Versions: Ian Sadovy WordPress Tables plugin versions = 1.3.9 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website without proper authentication,...

KLA52661 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Memor...

RHEL 8 : cups (RHSA-2023:4864)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4864 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups:...

Medium: haproxy

Issue Overview: HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind...

PT-2023-23900 · Unknown · Weebotlite

Name of the Vulnerable Software and Affected Versions: weebotLite plugin versions prior to 1.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the weebotLite plugin. This vulnerability requires authentication with admin+ privileges...

PT-2023-26745 · Unknown · Filemage Gateway

Name of the Vulnerable Software and Affected Versions: FileMage Gateway Windows Deployments versions 1.10.8 and before Description: The issue allows a remote attacker to obtain sensitive information via a crafted request to the "/mgmt/" component. This is a Directory Traversal vulnerability, whic...

PT-2023-4504 · Google +2 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in V8, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can potentially impact...

ASUSTOR ADM Multiple Vulnerabilities (AS-2023-009, AS-2023-010, AS-2023-011, AS-2023-012)

ASUSTOR ADM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:asustor:adm"; if description...

PT-2023-23615 · WordPress · Wppizza

Name of the Vulnerable Software and Affected Versions: WPPizza – A Restaurant Plugin plugin versions prior to 3.17.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...

PT-2023-25760 · Adm · Adm

Name of the Vulnerable Software and Affected Versions: ADM versions 4.0.6.RIS1 through 4.1.0 ADM versions 4.2.2.RI61 and below Description: The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and delete...

PT-2023-20706 · Paul Kehrer · Updraft

Name of the Vulnerable Software and Affected Versions: Paul Kehrer Updraft plugin versions = 0.6.1 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal use...