PT-2023-27197 · Blindside Networks · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: Blindside Networks BigBlueButton plugin versions = 3.0.0-beta.4 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-27323 · Pixelgrade · Pixtypes

Name of the Vulnerable Software and Affected Versions: Pixelgrade PixTypes plugin versions 1.4.15 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them t...

PT-2023-27194 · Std.Cloud · Wxsync Plugin

Name of the Vulnerable Software and Affected Versions: std.Cloud WxSync plugin versions = 2.7.23 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authenticated contributors to inject malicious scripts. The issue affects versions of the WxSync plugin up to and includin...

PT-2023-26495 · Visualmodo · Visualmodo Borderless Plugin

Name of the Vulnerable Software and Affected Versions: Visualmodo Borderless plugin versions = 1.4.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...

PT-2023-30363 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue concerns a floating point comparison with an incorrect operator in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to...

PT-2023-26233 · Miniorange · Miniorange Yourmembership Single Sign On – Ym Sso Login Plugin

Name of the Vulnerable Software and Affected Versions: miniOrange YourMembership Single Sign On – YM SSO Login plugin versions 1.1.3 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges c...

PT-2023-19891 · Unknown · Oauth Twitter Feed For Developers

Name of the Vulnerable Software and Affected Versions: oAuth Twitter Feed for Developers plugin versions = 2.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the oAuth Twitter...

PT-2023-19733 · Unknown · Bludit Cms

Name of the Vulnerable Software and Affected Versions: BluditCMS version 3.14.1 Description: The issue allows attackers to execute arbitrary code via the Categories Friendly URL, specifically through a Cross Site Scripting vulnerability. This enables attackers to inject malicious scripts into...

PT-2023-5249 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to an integer overflow or wraparound in the gpac multimedia platform, specifically in the filters/mux isom.c component. This can potentially allow an attacker to cause a denial ...

PT-2023-5250 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to 2.3-DEV Description: The issue is related to an out-of-bounds read in the GPAC multimedia platform, specifically in the MPEG12 ParseSeqHdr function. This can lead to a denial of service. The estimated number of...

PT-2023-5772 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 35433 Description: The issue is related to insufficient protection of registration data, which can lead to a sensitive information leak through log files. Recommendations: For Acronis Agent versions prior...

PT-2023-24857 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: A Missing Authentication for Critical Function issue could allow an attacker to run arbitrary commands on managed devices by an...

PT-2023-5804 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions before build 40173 Description: The issue is related to local privilege escalation during recovery due to improper soft link handling. This could allow an attacker to elevate their privileges...

PT-2023-4996 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.13.2 Description: The issue is related to improper input validation in the usememos/memos GitHub repository. This can allow a remote attacker to gain unauthorized access to protected information...

PT-2023-5247 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to a NULL Pointer Dereference in the gpac multimedia platform. This can be exploited to cause a denial of service. The vulnerable components include utils/xml parser.c,...

PT-2023-5248 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to 2.3-DEV Description: The issue is related to a heap-based buffer overflow in the avi read function of the GPAC multimedia platform, which can lead to a denial of service. This is caused by the avi read function in the...

PT-2023-30209 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.3-DEV Description: The issue is related to a Divide By Zero error in the gpac/gpac GitHub repository. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to resolve the issue...

PT-2023-19008 · WordPress · Chp Ads Block Detector

Name of the Vulnerable Software and Affected Versions: CHP Ads Block Detector plugin for WordPress versions up to, and including, 3.9.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the chp abd action function. This allows...

PT-2023-5314 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 32047 Description: The issue is related to insufficient authentication procedure in the backup and recovery software, which may allow an attacker to access confidential information. Specifically, it...

PT-2023-24292 · Mohammad I. Okfie · Wp-Hijri

Name of the Vulnerable Software and Affected Versions: Mohammad I. Okfie WP-Hijri plugin versions 1.5.1 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...