PT-2023-22864 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an out-of-bounds write in the BuildOemSecureSimLockResponse function of libsec-ril. This allows a local attacker to execute arbitrary code...

PT-2023-5918 · Atos · Atos Unify Openscape Common Management Portal

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 Description: The vulnerability in the web interface of the Atos Unify OpenScape Common Management Platform is related to insufficient protection of service...

PT-2023-5919 · Atos Unify · Atos Unify Openscape Common Management Portal

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 Atos Unify OpenScape Common Management Portal V10 before V10 R5.1.0 Description: The vulnerability in the web interface of the Atos Unify OpenScape Common Management Platfor...

PT-2023-5558

Name of the Vulnerable Software and Affected Versions: Apache Jackrabbit versions 2.20.10 and earlier stable branch Apache Jackrabbit versions 2.21.17 and earlier unstable branch Description: A Java object deserialization issue in Apache Jackrabbit webapp/standalone on all platforms allows an...

PT-2023-14931 · Ericsson · Ericsson Network Manager

Name of the Vulnerable Software and Affected Versions: Ericsson Network Manager ENM versions prior to 22.1 Description: The issue is related to improper Neutralization of Formula Elements in a CSV File within the Network Connectivity Manager NCM application, which can lead to remote code executio...

PT-2023-23084 · Foundry · Workspace-Server

Name of the Vulnerable Software and Affected Versions: Foundry workspace-server versions prior to 7.7.0 Description: A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This allowed users...

PT-2023-14442 · Unknown · Responsive Filemanager

Name of the Vulnerable Software and Affected Versions: Responsive Filemanager versions prior to 9.12.0 Description: The issue allows an attacker to bypass upload restrictions, resulting in remote code execution RCE. Recommendations: For versions prior to 9.12.0, update to version 9.12.0 or later ...

Important: libeconf

Issue Overview: A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2. CVE-2023-22652 A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow'...

Medium: glib2

Issue Overview: The upstream bug report describes this issue as follows: A vulnerability was found in GLib2.0, where DoS caused by handling a malicious text-form variant which is structured to cause looping superlinear to its text size. Applications are at risk if they parse untrusted text-form...

PT-2023-17318 · WordPress · Accordion & Faq

Name of the Vulnerable Software and Affected Versions: Accordion & FAQ WordPress plugin versions prior to 1.9.9 Description: The issue is related to Reflected Cross-Site Scripting. It occurs because the plugin does not properly escape various generated URLs before outputting them in attributes wh...

Medium: opensmtpd

Issue Overview: asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable through 7.0.0-portable, can abort upon a connection from a local, scoped IPv6 address. CVE-2023-29323 Affected Packages: opensmtpd Issue Correction: Run dnf update opensmt...

Important: cups-filters

Issue Overview: A vulnerability was found in cups-filters. This security flaw occurs if you use beh to create an accessible network printer, possibly resulting in remote code execution. CVE-2023-24805 Affected Packages: cups-filters Issue Correction: Run dnf update cups-filters --releasever...

PT-2023-20959 · WordPress · The Ultimate Product Catalog

Name of the Vulnerable Software and Affected Versions: The Ultimate Product Catalog WordPress plugin versions prior to 5.2.6 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability ...

Medium: dbus

Issue Overview: D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the...

Medium: nodejs

Issue Overview: In some cases Node.js did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service...

Medium: libtiff

Issue Overview: LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125. CVE-2022-4645 LibTIFF 4.4.0 has an out-of-bound...

PT-2023-22260 · WordPress · Flyn San Iframe Shortcode

Name of the Vulnerable Software and Affected Versions: Flyn San IFrame Shortcode plugin versions 1.0.5 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to b...

PT-2023-17405 · Tenable · Tenable.Io +2

Name of the Vulnerable Software and Affected Versions: Tenable.Io versions before Plugin Feed ID 202306261202 Tenable Nessus versions before Plugin Feed ID 202306261202 Tenable Security Center versions before Plugin Feed ID 202306261202 Description: This issue could allow a malicious actor with...

PT-2023-27522 · Owasp · Owasp Coraza Waf

Name of the Vulnerable Software and Affected Versions: OWASP Coraza WAF versions prior to 3.0.1 Description: The issue is caused by the misuse of log.Fatalf in the OWASP Coraza WAF library, which leads to the application crashing after receiving crafted requests from attackers. The application wi...

PT-2023-22251 · Plainware · Plainware Shiftcontroller Employee Shift Scheduling

Name of the Vulnerable Software and Affected Versions: Plainware ShiftController Employee Shift Scheduling plugin versions = 4.9.23 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects...