PT-2023-1170 · Vim +8 · Vim +8

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.1189 Description: The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the src/normal.c component. This overflow occurs in dynamic memory and can be exploited to allow an...

PT-2023-16110 · Bits And Blooms · Bloom

Name of the Vulnerable Software and Affected Versions: bits-and-blooms/bloom versions prior to 3.3.1 Description: The issue is related to an Uncontrolled Search Path Element in the GitHub repository bits-and-blooms/bloom. Recommendations: For versions prior to 3.3.1, update to version 3.3.1 or...

PT-2023-12352 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr versions prior to 2.4.0 Description: The issue is related to a buffer overflow in the implementation of net buf add mem in the USB device Bluetooth class. Recommendations: For versions prior to 2.4.0, update to version 2.4.0 or later t...

PT-2023-1280 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos versions prior to 19.4R3-S9 Junos versions 20.2 prior to 20.2R3-S6 Junos versions 20.3 prior to 20.3R3-S6 Junos versions 20.4 prior to 20.4R3-S5 Junos versions 21.1 prior to 21.1R3-S4 Junos versions 21.2 prior to 21.2R3-S3 Junos version...

PT-2023-13557 · Gullseye · Gullseye

Name of the Vulnerable Software and Affected Versions: GullsEye terminal operating system versions prior to 5.0.13 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-13610 · Mega · Mega Hopex

Name of the Vulnerable Software and Affected Versions: Mega HOPEX versions 15.2.0.6110 through V5CP4 Description: A link-manipulation issue was discovered. Recommendations: For Mega HOPEX versions 15.2.0.6110 through V5CP4, update to version V5CP4 or later to resolve the issue...

PT-2023-1358

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.66.1 Description The issue is related to the Cargo package manager in Rust, which does not perform SSH host key verification when cloning indexes and dependencies via SSH. This allows an attacker to perform...

PT-2023-1639 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30418 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 22.003.20282 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Adobe Acrobat Document Cloud Ado...

PT-2023-14399 · WordPress · Avirtum Ipanorama 360 Wordpress Virtual Tour Builder

Name of the Vulnerable Software and Affected Versions: iPanorama 360 WordPress Virtual Tour Builder plugin versions 1.6.29 and earlier Description: The issue allows users, such as those with contributor+ permissions, to perform Stored Cross-Site Scripting attacks. This is possible because some...

PT-2023-13945 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons WordPress plugin versions prior to 1.3.56 Description: The issue is related to the lack of authorization and CSRF checks when deleting a template, and it does not ensure that the post to be deleted is a template. Th...

PT-2023-14285 · WordPress · Wp Csv

Name of the Vulnerable Software and Affected Versions: WP CSV WordPress plugin versions 1.8.0.0 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitize and escape a parameter before outputting it back in th...

PT-2023-13501 · Kadence Wp · The Starter Templates By Kadence Wp

Name of the Vulnerable Software and Affected Versions: The Starter Templates by Kadence WP WordPress plugin versions prior to 1.2.17 Description: The issue arises from the unserialization of the content of an imported file, potentially leading to PHP object injection issues. This can occur when a...

PT-2023-16015 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and then displays it to other users, allowing an...

Realtek High-Definition Audio Driver Vulnerability - Lenovo Support US

No description provided...

Intel PROSet Wireless WiFi and Killer WiFi Software Advisory - Lenovo Support US

No description provided...

PT-2023-15974

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev32 Description The issue concerns a sensitive cookie in HTTPS sessions without the 'Secure' attribute set. This could cause the user agent to send those cookies in plaintext over an HTTP session...

PT-2023-18513 · Unknown · Go-Ipld-Prime

Name of the Vulnerable Software and Affected Versions: go-ipld-prime versions prior to 0.19.0 Description: The issue arises when encoding data that contains a Bytes kind Node using the json codec, causing the encoder to panic as it does not expect to receive Bytes tokens. This should be treated a...

PT-2023-14241 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remo...

PT-2023-13721 · WordPress · Team Members

Name of the Vulnerable Software and Affected Versions: The Team Members WordPress plugin versions prior to 5.2.1 Description: The issue allows high-privilege users, such as editors, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example...

PT-2022-28129 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...