SUSE SLES12 Security Update : flatpak (SUSE-SU-2023:1712-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1712-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8,...

PT-2023-21926 · Joomla · Anymailing Joomla Plugin

Name of the Vulnerable Software and Affected Versions: AnyMailing Joomla Plugin versions prior to 8.3.0 Description: The issue is related to missing access control in the AnyMailing Joomla Plugin, allowing unauthorized access to sensitive information and system files via path traversal. This occu...

PT-2023-20771 · Zijper · Zcbs +2

Name of the Vulnerable Software and Affected Versions: ZCBS Zijper Collectie Beheer Systeem ZCBS version 4.14k Zijper Publication Management System ZPBS version 4.14k Zijper Image Bank Management System ZBBS version 4.14k Description: The issue is related to Cross Site Scripting XSS, which is a...

PT-2023-15436 · Unknown · Quantumcloud Ai Chatbot Plugin

Name of the Vulnerable Software and Affected Versions: QuantumCloud AI ChatBot plugin versions prior to 4.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 4.3.0,...

PT-2023-13583 · WordPress +1 · Essential Plugin Popup Anything +1

Name of the Vulnerable Software and Affected Versions: WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin versions = 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user...

PT-2023-17153 · Synopsys +1 · Coverity +1

Name of the Vulnerable Software and Affected Versions: Coverity versions prior to 2023.3.2 Description: The issue is related to forced browsing, which exposes authenticated resources to unauthorized actors due to an insecurely configured servlet mapping for the underlying Apache Tomcat server. Th...

PT-2023-17168 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky versions up to 7.11.8 Description: A critical issue has been found, affecting the Installation Interface component, specifically the /install/index.php file. This issue leads to command injection and can be initiated remotely. The...

PT-2023-17046 · Robodk · Robodk

Name of the Vulnerable Software and Affected Versions: RoboDK versions 5.5.3 and prior Description: The issue is related to an insecure permission assignment to critical directories, which could allow a local user to escalate privileges and write files to the RoboDK process, achieving code...

PT-2023-18650 · WordPress · Wpsoul Greenshift

Name of the Vulnerable Software and Affected Versions: Wpsoul Greenshift – animation and page builder blocks plugin versions = 4.9.9 Description: The issue is related to an Authenticated Cross-Site Scripting XSS vulnerability. This means that an attacker who has authentication credentials for the...

PT-2023-21617 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A user may be able to cause a denial-of-service due to an issue that was addressed with improved state management. Recommendations: For versions prior to 13.3, update to macOS Ventura 13.3 to resolve...

PT-2023-15071 · Unknown · Woocommerce Vietnam Checkout

Name of the Vulnerable Software and Affected Versions: Le Van Toan Woocommerce Vietnam Checkout plugin versions prior to 2.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-16313 · WordPress · Wp Insurance

Name of the Vulnerable Software and Affected Versions: WP Insurance WordPress plugin versions prior to 2.1.4 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF...

cifar-10-model (=7.4.0), gamornet-cpu (>=0.2.3 <=0.4.3) +8 more potentially affected by CVE-2023-27579 via tensorflow-cpu (>=1.15.0 <=2.11.0)

tensorflow-cpu PYPI version =1.15.0, =0.2.3, =0.0.5, =1.0.0, =1.8.2, =0.1.3, =0.3.0.dev221212, =0.7.0, =0.7.5 Source cves: CVE-2023-27579 Source advisory: OSV:GHSA-5W96-866F-6RM8...

PT-2023-18858 · Dek-1705 · Dek-1705

Name of the Vulnerable Software and Affected Versions: DEK-1705 version 34.23.1 and earlier Description: A command execution issue was discovered in the device. Recommendations: For DEK-1705 version 34.23.1 and earlier, update to a version later than 34.23.1 to resolve the issue...

PT-2023-17799 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a missing bounds check in the p2p iface.cpp file, which could lead to an out of bounds read. This might result in local information disclosure, requiring System executi...

PT-2023-20227

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1 Description The issue is related to a floating point exception in the AudioSpectrogram function. The exception occurs when the stride is set to 0. This can be exploited by passing a stride value o...

PT-2023-21709 · Magepeople · Magepeople Team Event Manager/Tickets Selling Plugin For Woocommerce

Name of the Vulnerable Software and Affected Versions: MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce versions 3.8.6 and earlier Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability that requires authentication with admin+ privileges. This...

Low: libsolv

Issue Overview: A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-3200 Affected Packages: libsolv Issue Correction: Run dnf update libsolv --releasever 2023.0.20230322 or dnf...

Medium: curl

Issue Overview: A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the same command line because the state would not be properly carried. This issue may result in limited confidentiality and integrity. CVE-2023-23914 A flaw was fou...

Important: httpd

Issue Overview: A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. CVE-2006-20001 Inconsistent...