PT-2023-6999 · Siemens · Simatic Pcs Neo

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions prior to V4.1 Description: A vulnerability has been identified in the PUD Manager of SIMATIC PCS neo, where it does not properly neutralize user-provided inputs. This could allow an authenticated adjacent attacker to...

PT-2023-7000 · Siemens · Simatic Pcs Neo

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions prior to V4.1 Description: The issue is related to a stored cross-site scripting vulnerability in the Administration Console of SIMATIC PCS neo. This vulnerability could allow an attacker with high privileges to injec...

PT-2023-6997 · Siemens · Simatic Pcs Neo

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions prior to V4.1 Description: The issue is related to the use of an overly permissive CORS policy when accessing the Information Server from affected products. This could allow an attacker to trick a legitimate user into...

PT-2023-25086 · Intel · Intel Server Configuration Utility

Name of the Vulnerable Software and Affected Versions: Intel Server Configuration Utility versions prior to 16.0.9 Description: The issue is related to insecure inherited permissions in the installer for some Intel Server Configuration Utility software. This may allow an authenticated user to...

PT-2023-7369 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 24.0.2 and earlier Adobe After Effects versions 23.6 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of a...

SUSE-SU-2023:4429-1 Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed

This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security issues fixed: - CVE-2023-31022: Fixed NULL ptr deref in kernel module layer Changes in kernel-firmware-nvidia-gspx-G06: - update firmware to version 535.129.03 Changes in...

PT-2023-30477 · Unknown · Category Posts Widget

Name of the Vulnerable Software and Affected Versions: Category Post List Widget versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the Category Post List Widget. Recommendations: For versions n/a through 2....

PT-2023-20719 · WordPress · Aleksandr Guidrevitch Wp Meteor Website Speed Optimization Addon

Name of the Vulnerable Software and Affected Versions: Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin versions prior to 3.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into...

PT-2023-24854 · Unknown · Kebo Twitter Feed

Name of the Vulnerable Software and Affected Versions: Kebo Twitter Feed plugin versions prior to 1.5.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-22215 · WordPress · Whydonate

Name of the Vulnerable Software and Affected Versions: Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising plugin versions = 3.12.15 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a use...

PT-2023-21262 · WordPress · Jens Törnell Wp Page Numbers

Name of the Vulnerable Software and Affected Versions: Jens Törnell WP Page Numbers plugin versions = 0.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

SUSE-SU-2023:4415-1 Security update for clamav

This update for clamav fixes the following issues: - Updated to version 0.103.11: - CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 bsc1216625...

PT-2023-23897 · WordPress · Sunny Search

Name of the Vulnerable Software and Affected Versions: Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin versions = 1.0.2 Description: A Cross-Site Request Forgery CSRF issue affects the specified plugin, allowing unauthorized actions to be performed on behalf of a user without thei...

PT-2023-30381 · Webberzone · Webberzone Top 10 – Wordpress Popular Posts

Name of the Vulnerable Software and Affected Versions: WebberZone Top 10 – WordPress Popular posts by WebberZone plugin versions = 3.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-23143 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager plugin versions = 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...

PT-2023-30615 · Natus +1 · Natus Neuroworks +2

Name of the Vulnerable Software and Affected Versions: Natus NeuroWorks and SleepWorks versions prior to 8.4 GMA3 Description: The issue arises from the use of a default password xltek for the Microsoft SQL Server service sa account in Natus NeuroWorks and SleepWorks. This allows a threat actor t...

PT-2023-23709 · Unknown · Kathy Darling Simple User Listing

Name of the Vulnerable Software and Affected Versions: Kathy Darling Simple User Listing plugin versions = 1.9.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices...

PT-2023-32459 · WordPress · Updraftplus

Name of the Vulnerable Software and Affected Versions: UpdraftPlus: WordPress Backup & Migration Plugin versions up to, and including, 1.23.10 Description: The issue is related to Cross-Site Request Forgery due to a lack of nonce validation and insufficient validation of the instance id on the...

PT-2023-28414 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startEmailValidationActivity function within Samsung Account. This allows attackers to access arbitrary...

PT-2023-15047 · Unknown · Simple Newsletter Plugin – Noptin

Name of the Vulnerable Software and Affected Versions: Simple Newsletter Plugin – Noptin versions 1.9.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Simple Newsletter Plugin – Noptin. Recommendations: For version...