Fedora 37 : python3.11 (2023-63c69aa712)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-63c69aa712 advisory. Fix for CVE-2023-24329 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

PT-2023-15057 · Unknown · Kodex Posts Likes Plugin

Name of the Vulnerable Software and Affected Versions: Kodex Posts likes plugin versions = 2.4.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-21994

Name of the Vulnerable Software and Affected Versions CBOT Chatbot versions prior to Core: v4.0.3.4 CBOT Chatbot versions prior to Panel: v4.0.3.7 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing for Authentication Abuse and...

PT-2023-15217 · WordPress · Wordpress Performance Team Performance Lab

Name of the Vulnerable Software and Affected Versions: WordPress Performance Team Performance Lab plugin versions = 2.2.0 Description: A Cross-Site Request Forgery CSRF issue exists. This allows an attacker to perform unintended actions on a user's account. Recommendations: For WordPress...

PT-2023-23342 · Mitel · Mivoice Connect

Name of the Vulnerable Software and Affected Versions: MiVoice Connect versions 9.6.2208.101 and earlier Description: A vulnerability in the Connect Mobility Router component could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficie...

Medium: git

Issue Overview: Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to git apply --reject, a path outside the working tree can be overwritten with partially controlled...

PT-2023-12628 · Bitdefender · Bitdefender Antivirus Plus +2

Name of the Vulnerable Software and Affected Versions: Bitdefender Total Security versions prior to 26.0.10.45 Bitdefender Internet Security versions prior to 26.0.10.45 Bitdefender Antivirus Plus versions prior to 26.0.10.45 Description: The issue is related to an Unquoted Search Path or Element...

PT-2023-20090 · WordPress · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher plugin versions = 3.8.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-21188 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10 Description: A buffer overflow vulnerability in the multiple setting pages of SolarView Compact allows a remote authenticated...

PT-2023-21730 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: cloudexplorer-lite versions prior to v1.1.0 Description: The issue is related to improper access control in the cloudexplorer-lite GitHub repository. Recommendations: For versions prior to v1.1.0, update to version v1.1.0 or later to resolve...

PT-2023-19144 · WordPress · Hm Plugin Wordpress Books Gallery

Name of the Vulnerable Software and Affected Versions: HM Plugin WordPress Books Gallery plugin versions = 4.4.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

MyBB < 1.8.34 XSS Vulnerability

MyBB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

PT-2023-21697 · Unknown · Mw Wp Form

Name of the Vulnerable Software and Affected Versions: MW WP Form versions v4.4.2 and earlier Description: The issue allows a remote unauthenticated attacker to upload an arbitrary file due to an unrestricted upload of files with dangerous types. This may lead to potential security risks...

PT-2023-24276 · Unknown +1 · Bitcoin Core +1

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 24.1 Description: The issue allows attackers to cause a denial of service, specifically CPU consumption, because draining the inventory-to-send queue is inefficient. This has been exploited in the wild in May...

PT-2023-23893 · WordPress · Pingonline Dyslexiefont Free

Name of the Vulnerable Software and Affected Versions: PingOnline Dyslexiefont Free plugin versions = 1.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

Design/Logic Flaw

Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension may lead to Remote Code Execution. If the name parameter value is not empty string'' in the View.php's doesTemplateExist - resolveTemplate - resolveTemplateInternal -...

PT-2023-23401 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad version 5.4.0 Description: An issue in the software allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existin...

PT-2023-21112 · Ramon Fincken · Ramon Fincken Auto Prune Posts Plugin

Name of the Vulnerable Software and Affected Versions: Ramon Fincken Auto Prune Posts plugin versions = 1.8.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

HPESBUX04475 rev.1 - HPE HP-UX Using OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Denial of Service DoS, Buffer Overflow; Remote: Bypass Security Restrictions, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX OpenSSL Software prior to A.01.01.01t.001 CVSS...

Collabora CODE / Collabora Online < 6.4.27, 21.x < 21.11.9, 22.x < 22.05.13 XSS Vulnerability

Collabora CODE Collabora Online Development Edition and Collabora Online are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...