PT-2023-5969 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to spoof security UI via a crafted HTML page. This...

PT-2023-29593 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 2.3.5 Description: The issue concerns the verification of server certificates. In affected versions, server certificates were not verified. Recommendations: For versions prior to 2.3.5, update to version 2.3.5...

PT-2023-29156 · Unknown · Nickduncan Contact Form

Name of the Vulnerable Software and Affected Versions: NickDuncan Contact Form plugin versions = 2.0.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-29524 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.34.7 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.34.7 Description: The Atos Unify OpenScape 4000 exposes sensitive information, potentially allowing lateral movement ...

PT-2023-29130 · Unknown · Checkfront Online Booking System

Name of the Vulnerable Software and Affected Versions: Checkfront Online Booking System plugin versions = 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-27537 · Cluevo · Cluevo Lms

Name of the Vulnerable Software and Affected Versions: CLUEVO CLUEVO LMS, E-Learning Platform plugin versions = 1.10.0 Description: A Cross-Site Request Forgery CSRF issue affects the CLUEVO CLUEVO LMS, E-Learning Platform plugin. This issue allows an attacker to perform unintended actions on a...

PT-2023-5851 · Qvpn · Qvpn Windows +1

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.1.0.0518 Description: The issue is related to insufficient protection of credentials, which could allow local authenticated administrators to gain access to user accounts and sensitive data via unspecifi...

PT-2023-36274 · Yq · Yq

Name of the Vulnerable Software and Affected Versions: yq versions prior to 4.35.2 Description: The issue concerns a number parsing as float bug in JSON, string and null concatenation consistency, and an expression parsing issue. Other fixes include improvements to handling various file formats,...

Security Bulletin: IBM Security Directory Suite has fixed a security vulnerability (CVE-2022-33160)

Summary A security vulnerability has been addressed in the IBM Security Directory Suite. Vulnerability Details CVEID:CVE-2022-33160 DESCRIPTION: IBM Security Directory Suite uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CV...

PT-2023-27693 · Widestand · Widestand

Name of the Vulnerable Software and Affected Versions: WideStand versions prior to 5.3.5 Description: The issue is a Cross-site Scripting XSS reflected vulnerability. It generates one of the meta tags directly using the content of the queried URL, allowing an attacker to inject HTML/Javascript co...

PT-2023-5790 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 29258 Description: The issue is related to sensitive information disclosure and manipulation due to missing authorization. This could allow an attacker to gain unauthorized access to protected information...

PT-2023-20081 · WordPress · Gopi Ramasamy Wp Tell A Friend Popup Form Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy WP tell a friend popup form plugin versions = 7.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that th...

PT-2023-25946 · Ibm · Ibm Observability With Instana

Name of the Vulnerable Software and Affected Versions: IBM Observability with Instana versions 1.0.243 through 1.0.254 Description: The issue allows an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. Recommendations: For versions 1.0.243...

PT-2023-27318 · WordPress · Crudlab Wp Like Button

Name of the Vulnerable Software and Affected Versions: CRUDLab WP Like Button plugin versions = 1.7.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-28051 · WordPress · Mycryptocheckout

Name of the Vulnerable Software and Affected Versions: edward plainview MyCryptoCheckout plugin versions = 2.125 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-26392 · Cyle Conoly · Wp-Flybox

Name of the Vulnerable Software and Affected Versions: Cyle Conoly WP-FlyBox plugin versions = 6.46 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

PT-2023-26815 · Woocommerce · Thedotstore Banner Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Banner Management For WooCommerce plugin versions = 2.4.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

PT-2023-26162 · WordPress · Optimonk

Name of the Vulnerable Software and Affected Versions: OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin versions = 2.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

PT-2023-27051 · Prestashop +1 · Theme Volty Cms Testimonial Module +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Testimonial module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS Testimonial module for PrestaShop, allowing a guest to perform SQL...

PT-2023-26816 · Unknown · Thedotstore Fraud Prevention For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Fraud Prevention For Woocommerce plugin versions 2.1.5 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of authenticated users. This can...