PT-2023-8629 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.10 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension, which could lead to the disclosure of sensitive memory. This can be exploited by an attacker to bypass...

PT-2023-27425 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 Description: A privacy issue was addressed by moving sensitive data to a protected location. This issue allows an app to potentially access user-sensitive data. Recommendations: For macOS Sonoma versions...

PT-2023-31544

Name of the Vulnerable Software and Affected Versions Bitcoin Core versions prior to 26.1 Bitcoin Knots versions prior to 25.1.knots20231115 Description Datacarrier size limits can be bypassed by obfuscating data as code, such as using OP FALSE OP IF. This issue was exploited in the wild by...

PT-2023-9571

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23 Oracle GraalVM for JDK versions 17.0.12, 21.0.4, 23 Oracle GraalVM Enterprise Edition versions 20.3.15, 21.3.11 Description The issue is related to the Serialization...

PT-2023-9073 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Primavera P6 Enterprise Project Portfolio Management versions 19.12.0 through 19.12.22 Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Primavera P6 Enterprise Project Portfolio Management versions 21.12....

PT-2023-32310 · WordPress · Filr

Name of the Vulnerable Software and Affected Versions: Filr WordPress plugin version 1.2.3.6 and earlier Description: The issue allows for Remote Code Execution RCE, enabling the operating system to execute commands and fully compromise the server on behalf of a user with Author-level privileges...

PT-2023-8682 · Unknown · Scalefusion

Name of the Vulnerable Software and Affected Versions: ScaleFusion versions 10.5.2 through 10.5.6 Description: The issue is related to insufficient access control in the isolated environment of Scalefusion MDM Agent, which can be exploited to impact the confidentiality, integrity, and availabilit...

PT-2023-31283 · Jenkins · Jenkins Neuvector Vulnerability Scanner Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NeuVector Vulnerability Scanner Plugin versions 1.22 and earlier Description: A cross-site request forgery CSRF vulnerability exists due to the lack of permission checks in a connection test HTTP endpoint, allowing attackers with...

PT-2023-32568 · WordPress · Bookingpress

Name of the Vulnerable Software and Affected Versions: BookingPress plugin for WordPress versions up to, and including, 1.0.76 Description: The issue is related to insufficient file validation on the bookingpress process upload function, allowing authenticated attackers with administrator-level...

PT-2023-31967 · WordPress · Cleantalk

Name of the Vulnerable Software and Affected Versions: CleanTalk WordPress plugin versions prior to 2.121 Description: The issue allows an attacker to manipulate the client IP address retrieved by the Security & Malware scan, potentially bypassing bruteforce protection. This is due to the plugin...

PT-2023-28384 · WordPress · Eventprime

Name of the Vulnerable Software and Affected Versions: EventPrime WordPress plugin versions prior to 3.3.0 Description: The issue allows an attacker to purchase bookings without making a payment by manipulating the price specified in the client request. Recommendations: For versions prior to 3.3....

PT-2023-32291 · WordPress · Wordpress Backup & Migration

Name of the Vulnerable Software and Affected Versions: WordPress Backup & Migration WordPress plugin versions prior to 1.4.4 Description: The issue allows users with a role as low as Subscriber to update some plugin settings due to a lack of authorization for certain AJAX requests. Recommendation...

PT-2023-32412 · WordPress · Job Manager & Career

Name of the Vulnerable Software and Affected Versions: Job Manager & Career WordPress plugin versions prior to 1.4.4 Description: The issue allows an unauthorized user to view and download private files of other users due to a vulnerability in the Directory Listings system. This poses a serious...

PT-2023-32526

Name of the Vulnerable Software and Affected Versions Neutron IP Camera versions prior to b1130.1.0.1 Description The issue is related to a Path Traversal vulnerability, allowing Absolute Path Traversal using '/../filedir'. This enables unauthorized access to files on the system. Recommendations...

PT-2023-20412 · WordPress · My Youtube Channel

Name of the Vulnerable Software and Affected Versions: My YouTube Channel plugin versions = 3.23.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application th...

PT-2023-30633 · Unknown · Codez Quick Call Button

Name of the Vulnerable Software and Affected Versions: Codez Quick Call Button plugin versions prior to 1.2.9 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions prior to 1.2.9,...

PT-2023-21130 · WordPress · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka plugin versions = 3.29.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user i...

PT-2023-32085 · WordPress · Funnelforms Free

Name of the Vulnerable Software and Affected Versions: Funnelforms Free plugin for WordPress versions up to, and including, 3.4 Description: The issue allows authenticated attackers with subscriber-level permissions and above to modify data without authorization due to a missing capability check ...

PT-2023-8700 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla versions 5.0.2 and below Joomla versions 4.4.2 and below Description: Inadequate content filtering in Joomla leads to multiple XSS vulnerabilities in various components. Attackers can trick administrators into clicking on a malicious...

PT-2023-32296 · WordPress · Easyrotator For Wordpress

Name of the Vulnerable Software and Affected Versions: EasyRotator for WordPress plugin versions up to, and including, 1.0.14 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'easyrotator' shortcode. This allows...