PT-2023-22059 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.2R3-S7 Junos OS versions prior to 19.3R3-S8 Junos OS versions prior to 19.4R3-S12 Junos OS versions prior to 20.2R3-S8 Junos OS versions prior to 20.4R3-S7 Junos OS versions prior to 21.1R3-S5 Junos OS versions...

PT-2023-22055 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R3-S11 Junos OS versions 20.2 prior to 20.2R3-S6 Junos OS versions 20.4 prior to 20.4R3-S5 Junos OS versions 21.1 prior to 21.1R3-S4 Junos OS versions 21.2 prior to...

Important: kernel-livepatch-5.10.165-143.735

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

Important: kernel-livepatch-5.10.167-147.601

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

PT-2023-22156 · Sap · Sap Web Dispatcher +1

Name of the Vulnerable Software and Affected Versions: ABAP Platform versions 7.85 through 7.91 SAP Web Dispatcher versions 7.85 through 7.89 Description: The IP filter in ABAP Platform and SAP Web Dispatcher may be vulnerable due to erroneous IP netmask handling, potentially enabling access to...

PT-2023-6439 · Adobe · Acrobat +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat Reader versions 20.005.30441 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability that could result i...

ILIAS 6.24, 7.x < 7.20 Multiple Vulnerabilities

ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

Medium: ImageMagick

Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...

PT-2023-19890 · Cththemes · Cththemes Monolit Theme

Name of the Vulnerable Software and Affected Versions: Cththemes Monolit theme versions 2.0.6 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

PT-2023-21957 · Cimatti · Cimatti Consulting Wordpress Contact Forms

Name of the Vulnerable Software and Affected Versions: Cimatti Consulting WordPress Contact Forms by Cimatti plugin versions 1.5.4 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts in...

PT-2023-20807 · Codefever · Codefever

Name of the Vulnerable Software and Affected Versions: codefever versions prior to 2023.2.7-commit-b1c2e7f Description: A remote code execution issue was found in the component /controllers/api/user.php, allowing for potential exploitation. Recommendations: For versions prior to...

PT-2023-19214 · Leonardo Giacone · Easy Panorama

Name of the Vulnerable Software and Affected Versions: Leonardo Giacone Easy Panorama plugin versions = 1.1.4 Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability allows an attacker to inject...

PT-2023-19539 · Unknown · Codeat Glossary Plugin

Name of the Vulnerable Software and Affected Versions: Codeat Glossary plugin versions = 2.1.27 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. There is no...

PT-2023-19351 · Unknown · Yannick Lefebvre Modal Dialog

Name of the Vulnerable Software and Affected Versions: Yannick Lefebvre Modal Dialog plugin versions = 3.5.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Yannick Lefebvre Modal Dialog...

PT-2023-19544 · Kiboko · Kiboko Labs Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Namaste! LMS plugin versions = 2.5.9.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Kiboko Labs Namaste! LMS plugin...

PT-2023-17050 · Unknown · Securitycenter

Name of the Vulnerable Software and Affected Versions: Security Center version 5.11.2 Description: The issue is related to SQL Injection in the Hardware Inventory report. Recommendations: For Security Center version 5.11.2, update to a version that contains a fix for this issue...

PT-2023-21530 · Dell · Dell Emc Streaming Data Platform

Name of the Vulnerable Software and Affected Versions: Dell Streaming Data Platform versions prior to 1.4 Description: The issue allows a remote unauthenticated attacker to phish legitimate users, redirecting them to malicious websites. This can lead to information disclosure and the launch of...

SUSE SLES12 Security Update : flatpak (SUSE-SU-2023:1712-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1712-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8,...

PT-2023-21926 · Joomla · Anymailing Joomla Plugin

Name of the Vulnerable Software and Affected Versions: AnyMailing Joomla Plugin versions prior to 8.3.0 Description: The issue is related to missing access control in the AnyMailing Joomla Plugin, allowing unauthorized access to sensitive information and system files via path traversal. This occu...

PT-2023-20771 · Zijper · Zcbs +2

Name of the Vulnerable Software and Affected Versions: ZCBS Zijper Collectie Beheer Systeem ZCBS version 4.14k Zijper Publication Management System ZPBS version 4.14k Zijper Image Bank Management System ZBBS version 4.14k Description: The issue is related to Cross Site Scripting XSS, which is a...