PT-2023-8236 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 114.0.5735.90 Description: The issue is related to insufficient policy enforcement in the Android Debug Bridge ADB component of Google Chrome on ChromeOS. This allows a local attacker with physical...

PT-2023-19287 · WordPress · Surbma Surbma | Gdpr Proof Cookie Consent & Notice Bar

Name of the Vulnerable Software and Affected Versions: Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugin versions = 17.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Surbma Surbma | GDPR Proof Cookie Consent & Notice Bar plugi...

PT-2023-16348 · WordPress · Custom Post Type List Shortcode

Name of the Vulnerable Software and Affected Versions: Custom Post Type List Shortcode WordPress plugin versions 1.4.4 and earlier Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and...

PT-2023-14582 · Unknown · Squirrly Seo Plugin

Name of the Vulnerable Software and Affected Versions: Squirrly SEO Plugin versions prior to 12.1.20 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them...

Mageia: Security Advisory (MGASA-2023-0163)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-10635 · Carlo Gavazzi · Carlo Gavazzi Powersoft

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi Powersoft versions up to 2.1.1.1 Description: The issue allows an unauthenticated, remote attacker to download any file from the affected device due to improper limitation of a pathname to a restricted directory, also known as...

PT-2023-22815 · Unknown · Tuleap Open Alm

Name of the Vulnerable Software and Affected Versions: Tuleap Open ALM versions prior to 14.7.99.143 Description: The title of an artifact is not properly escaped in the tooltip, allowing a malicious user with the capability to create an artifact or edit a field title to force a victim to execute...

Moodle 4.1.x < 4.1.3 Arbitrary Folder Creation Vulnerability (MSA-23-0014)

Moodle is prone to an arbitrary folder creation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle";...

PT-2023-17156 · WordPress · Seopress

Name of the Vulnerable Software and Affected Versions: SEOPress WordPress plugin versions prior to 6.5.0.3 Description: The issue allows high-privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present, due to the unserialize of user input provided via the...

PT-2023-13451 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText BizManager versions prior to 16.6.0.1 Description: The issue arises from improper validation during the change-password operation, allowing any authenticated user to change the password of any other user, including the Administrator...

PT-2023-22514 · Magicjack · Magicjack A921 Usb Phone Jack

Name of the Vulnerable Software and Affected Versions: MagicJack A921 USB Phone Jack versions prior to Rev 3.0 V1.4 Description: The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access. Attackers can...

PT-2023-21196 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.2.0-beta Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and later displays it, allowing attackers to...

PT-2023-22429 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.3 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...

openSUSE 15 Security Update : stellarium (openSUSE-SU-2023:0097-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0097-1 advisory. - In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal...

PT-2023-20079 · WordPress · Wp-Insert

Name of the Vulnerable Software and Affected Versions: namithjawahar Wp-Insert plugin versions = 2.5.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 2.5.0, update to a versi...

PT-2023-20264 · Digitalblue · Digitalblue Click To Call/Chat Buttons Plugin

Name of the Vulnerable Software and Affected Versions: DIGITALBLUE Click to Call or Chat Buttons plugin versions 1.4.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects t...

PT-2023-14592 · WordPress · Softaculous Loginizer

Name of the Vulnerable Software and Affected Versions: Softaculous Loginizer plugin versions prior to 1.7.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-21252 · Unknown · Ian Haycox Motor Racing League

Name of the Vulnerable Software and Affected Versions: Ian Haycox Motor Racing League plugin versions prior to 1.9.9 Description: The issue is related to an Authenticated admin+ Cross-Site Scripting XSS vulnerability. This means that an attacker who has administrative access to the system can...

PT-2023-14591 · Krishaweb · Krishaweb Add Multiple Marker Plugin

Name of the Vulnerable Software and Affected Versions: KrishaWeb Add Multiple Marker plugin versions = 1.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2023-19566 · Unknown · Vryasage Marketing Performance

Name of the Vulnerable Software and Affected Versions: VryaSage Marketing Performance plugin versions prior to 2.0.0 Description: The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...