PT-2023-34757 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns the xhci component of the Linux Kernel, where an endpoint is not checked for validity before being dereferenced. This could potentially lead to security vulnerabilities,...

PT-2023-19059 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code or crash the device remotely. Recommendations: For Snap One Wattbox...

PT-2023-12863 · Netiq · Netiq Identity Manager

Name of the Vulnerable Software and Affected Versions: NetIQ Identity Manager versions prior to 4.8.5 Description: The issue allows an attacker to determine whether a file exists on the filesystem. This is a file existence disclosure vulnerability in the NetIQ Identity Manager plugin...

PT-2023-14679 · WordPress · Optimize Images Alt Text (Alt Tag) & Names For Seo Using Ai

Name of the Vulnerable Software and Affected Versions: Optimize images ALT Text & names for SEO using AI WordPress plugin versions prior to 2.0.8 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CS...

PT-2023-14894 · WordPress · Product Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Slider for WooCommerce WordPress plugin versions prior to 2.6.4 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users suc...

PT-2023-14368 · WordPress · Cbx Petition

Name of the Vulnerable Software and Affected Versions: CBX Petition for WordPress plugin versions 1.0.3 and earlier Description: The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticate...

PT-2023-14528 · WordPress · Search & Filter

Name of the Vulnerable Software and Affected Versions: Search & Filter WordPress plugin versions prior to 1.2.16 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admin, du...

PT-2023-14470 · WordPress · Brutebank

Name of the Vulnerable Software and Affected Versions: BruteBank WordPress plugin versions prior to 1.9 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: For versions...

PT-2023-16266

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev40 Description The issue is related to improper input validation. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2023-1169 · Libtiff +10 · Libtiff +10

Name of the Vulnerable Software and Affected Versions: LibTIFF versions through 4.5.0 Description: The issue is related to a heap-based buffer overflow in the processCropSelections function of the tools/tiffcrop.c file in the LibTIFF library. This can be exploited by a remote attacker via a craft...

PT-2023-14692 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions 1.6.0 and earlier Description: A reflected-XSS issue was discovered in the article publish component. The issue is related to the cookie ENV LIST URL. Recommendations: For EyouCMS versions 1.6.0 and earlier, update to a versi...

PT-2023-16243 · WordPress · Social Warfare

Name of the Vulnerable Software and Affected Versions: Social Warfare plugin for WordPress versions up to, and including, 4.3.0 Description: The issue is related to authorization bypass due to a missing capability check on several AJAX actions. This allows authenticated attackers with...

PT-2023-8492 · WordPress · Tc Ultimate Wp Query Search Filter

Name of the Vulnerable Software and Affected Versions: TC Ultimate WP Query Search Filter plugin versions = 1.0.10 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It is associated with the failure to protect the structure of web pages, which could allow a remote...

CVE-2023-22733 Improper Output Neutralization in Log Module in shopware

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all kind of sent mails. An attacker with access to either the local system logs or a centralized logging store may have access to other users accounts. This issu...

PT-2023-33354 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to a PCI device reference count leak in the amd8111 gpio driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33307 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to a function prototype mismatch in the snd seq expand var event function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-34206 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the return value check of the mmc add host function in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-33397 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue is related to an out of bounds read in the mvneta config rss function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33261 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential security issue is identified in the Linux Kernel, related to the m can class free dev function in probe/remove methods. The actual impact and attack plausibility have not yet be...