PT-2023-6243 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S7-EVO Junos OS Evolved version 21.1R1-EVO and later Junos OS Evolved versions prior to 21.2R3-S5-EVO Junos OS Evolved versions prior to 21.3R3-S4-EVO Junos OS Evolved versions prior to 21.4R3-S4-EVO...

PT-2023-29337 · WordPress · Bainternet Shortcodes Ui

Name of the Vulnerable Software and Affected Versions: Bainternet ShortCodes UI plugin versions 1.9.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

PT-2023-29173 · Rebing Oõ · Woocommerce Esto Plugin

Name of the Vulnerable Software and Affected Versions: Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin versions = 2.23.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...

PT-2023-28042 · WordPress · Hide Admin Notices – Admin Notification Center

Name of the Vulnerable Software and Affected Versions: Rémi Leclercq Hide admin notices – Admin Notification Center plugin versions prior to 2.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user in...

PT-2023-5850 · Qvpn · Qvpn Device Client

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.2.0.0823 Description: A cleartext transmission of sensitive information issue has been reported, which could allow local authenticated administrators to read sensitive data via unspecified vectors...

PT-2023-27204 · WordPress · Gangesh Matta Simple Org Chart

Name of the Vulnerable Software and Affected Versions: Gangesh Matta Simple Org Chart plugin versions prior to 2.3.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

PT-2023-29167 · Dylan Blokhuis · Instant Css

Name of the Vulnerable Software and Affected Versions: Dylan Blokhuis Instant CSS plugin versions = 1.2.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-29225 · Unknown · Sanitize-Html

Name of the Vulnerable Software and Affected Versions: HtmlSanitizer versions prior to 8.0.723 HtmlSanitizer version 8.1.722-beta and earlier Description: The issue occurs in configurations where foreign content is allowed, specifically when svg or math are in the list of allowed elements. This...

PT-2023-27511 · Woocommerce · Thedotstore Dynamic Pricing/Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin versions = 2.4.0 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their...

SUSE-SU-2023:3955-1 Security update for vim

This update for vim fixes the following issues: Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflistaltfpos bsc1215004. - CVE-2023-4734: Fixed segmentation fault in function ffullcommand bsc1214925. - CVE-2023-4735: Fixed out of bounds write in ops.c bsc1214924. -...

PT-2023-28051 · WordPress · Mycryptocheckout

Name of the Vulnerable Software and Affected Versions: edward plainview MyCryptoCheckout plugin versions = 2.125 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-21642 · WordPress · Trustindex.Io Wp Testimonials

Name of the Vulnerable Software and Affected Versions: Trustindex.Io WP Testimonials plugin versions 1.4.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-26819 · Fetch Designs · Fetch Designs Sign-Up Sheets Plugin

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets plugin versions = 2.2.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

PT-2023-22936 · Unknown · Hdcp Trustlet

Name of the Vulnerable Software and Affected Versions: HDCP trustlet versions prior to SMR Oct-2023 Release 1 Description: The issue is a stack-based buffer overflow that allows local privileged attackers to perform code execution. This can be exploited by attackers to execute malicious code...

PT-2023-26815 · Woocommerce · Thedotstore Banner Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Banner Management For WooCommerce plugin versions = 2.4.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

PT-2023-9128 · Qnap · Quts Hero +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.4.2596 build 20231128 QuTS hero versions prior to h5.1.4.2596 build 20231128 Description: The issue is related to a buffer copy without checking the size of the input, which can lead to a buffer overflow in memory...

Low: containerd

Issue Overview: No CVE associated with this advisory Affected Packages: containerd Issue Correction: Run dnf update containerd --releasever 2023.2.20231002 or dnf update --advisory ALAS2023-2023-374 --releasever 2023.2.20231002 to update your system. More information on how to update your system...

PT-2023-29155 · Unknown · Gopi Ramasamy Popup Contact Form Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Popup contact form plugin versions prior to 7.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication with admin or higher privileges. Recommendations: F...

PT-2023-36331 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: flac versions prior to 1.4.0 Description: A Buffer Overflow issue exists in the bitwriter grow function, allowing remote attackers to execute arbitrary code through crafted input to the encoder. Recommendations: For versions prior to 1.4.0,...

PT-2023-28027 · Andreas Heigl · Authldap Plugin

Name of the Vulnerable Software and Affected Versions: Andreas Heigl authLdap plugin versions = 2.5.9 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...