PT-2023-4176 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a heap buffer overflow in the Visuals component of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

PT-2023-4059 · Siemens · Ruggedcom Rox Rx1500 +8

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.0 RUGGEDCOM ROX MX5000RE versions prior to V2.16.0 RUGGEDCOM ROX RX1400 versions prior to V2.16.0 RUGGEDCOM ROX RX1500 versions prior to V2.16.0 RUGGEDCOM ROX RX1501 versions prior to V2.16.0...

PT-2023-25668 · Inex · Ixpmanager

Name of the Vulnerable Software and Affected Versions: INEX IXP-Manager versions prior to 6.3.1 Description: The issue allows for XSS attacks. The following files may be affected: list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, overview.foil.php, cust.foil.php, and...

PT-2023-25295 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: In Progress WhatsUp Gold versions prior to 23.0.0 Description: The issue is related to an SNMP-related application endpoint that failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary...

PT-2023-24842 · WordPress · Kanban For Wordpress

Name of the Vulnerable Software and Affected Versions: Kanban for WordPress Kanban Boards for WordPress plugin versions prior to 2.5.21 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authentication bypass for admin+ users. Recommendations: For versions prior to...

PT-2023-4039 · Siemens · Simatic Mv540 S +2

Name of the Vulnerable Software and Affected Versions: SIMATIC MV540 H versions prior to V3.3.4 SIMATIC MV540 S versions prior to V3.3.4 SIMATIC MV550 H versions prior to V3.3.4 SIMATIC MV550 S versions prior to V3.3.4 SIMATIC MV560 U versions prior to V3.3.4 SIMATIC MV560 X versions prior to...

PT-2023-23754 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS versions up to 6.62 Description: A critical issue was discovered, affecting unknown code. The manipulation of the username and password arguments with the input admin leads to the use of a hard-coded password. Recommendations: For OTCMS...

PT-2023-24775 · Grav +1 · Grav +1

Name of the Vulnerable Software and Affected Versions: Grav versions prior to 1.7.42 Description: The issue allows for server-side template injection, which can lead to remote code execution. This can be achieved by embedding malicious PHP code on the administrator screen by a user with page...

PT-2023-20591 · Hewlett Packard · Hp Device Manager

Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue could potentially allow command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...

PT-2023-22796 · Apache +1 · Apache Guacamole +1

Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 1.5.1 and older Description: The issue arises from incorrect calculations of instruction element lengths during the Guacamole protocol handshake. This could allow an attacker to inject Guacamole instructions through...

PT-2023-24780 · Bmc · Bmc Patrol

Name of the Vulnerable Software and Affected Versions: BMC Patrol versions prior to 22.1.00 Description: An issue was discovered where the agent's configuration can be remotely queried, containing the Patrol account password encrypted with a default AES key. This account can then be used to achie...

PT-2023-22579 · Prestashop · Myinventory

Name of the Vulnerable Software and Affected Versions: PrestaShop module myinventory versions 1.6.6 and earlier Description: The issue allows unauthorized access to personal information due to incorrect access control in the myinventory module. This can be exploited by a guest performing a path...

PT-2023-4349 · Google +2 · Angle Library +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to an out of bounds read and write in the ANGLE library of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted...

SUSE-SU-2023:2219-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: Updated to version 13.11: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script bsc1211228. - CVE-2023-2455: Fixed an issue that coul...

PT-2023-24115 · Jenkins · Jenkins Ansible Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Ansible Plugin versions 204.v8191fd551eb f and earlier Description: The issue concerns the storage of extra variables, often used to pass secrets, in an unencrypted manner in job config.xml files on the Jenkins controller. These...

PT-2023-20763 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf versions 4.04 and earlier Description: A bad color space object in the input PDF file can cause a divide-by-zero error. Recommendations: For Xpdf versions 4.04 and earlier, update to a version later than 4.04 to resolve the issue...

PT-2023-14977 · Intel · Intel Smart Campus Android Application

Name of the Vulnerable Software and Affected Versions: IntelR Smart Campus Android application versions prior to 9.9 Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations:...

CVE-2023-31138 DHIS2 Core vulnerable to Improper Access Control with PATCH requests

DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.36 branch and prior to versions 2.37.9.1, 2.38.3.1, and 2.39.1.2, using object model traversal in the payload of a PATCH request, authenticated users with write access to an obje...

PT-2023-16687 · WordPress · Ai Chatbot

Name of the Vulnerable Software and Affected Versions: AI ChatBot WordPress plugin versions prior to 4.4.5 Description: The issue concerns the AI ChatBot WordPress plugin, which does not properly escape most of its settings before outputting them in the dashboard and lacks a proper CSRF check. Th...

PT-2023-16812 · WordPress · Advanced Custom Fields Pro

Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields ACF Free and Pro WordPress plugins versions 5.x through 5.12.4 Advanced Custom Fields ACF Free and Pro WordPress plugins versions 6.x through 6.0.x Description: The issue allows users with a role of Contributor and abov...