PT-2023-30780

Name of the Vulnerable Software and Affected Versions Aceka Company Management versions prior to 3072 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

CVE-2023-41081 Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request

Important: Authentication Bypass CVE-2023-41081 The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an...

PT-2023-30290 · Unknown · Codemeter Runtime

Name of the Vulnerable Software and Affected Versions: CodeMeter Runtime versions prior to 7.60c Description: The issue is related to an Improper Privilege Management vulnerability, which occurs due to the incorrect use of privileged APIs in CodeMeter Runtime. This allows a local, low-privileged...

PT-2023-5186 · Unknown · Qms Automotive

Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: The issue is related to the QMS.Mobile module of the QMS Automotive software, which stores sensitive application data in an external insecure storage. This could allow an attacker to alter...

PT-2023-5162 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

Adobe Acrobat < 20.005.30524 / 23.006.20320 Vulnerability (APSB23-34)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30524 or 23.006.20320. It is, therefore, affected by a vulnerability. - Acrobat Reader versions 23.003.20284 and earlier, 20.005.30516 and earlier and 20.005.30514 and earlier are affected by an...

PT-2023-5183 · Unknown · Qms Automotive

Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: The issue is related to the disclosure of information via a server error message, potentially allowing a remote attacker to gain unauthorized access to the database. The affected applicatio...

PT-2023-26672 · Vtiger · Vtiger Crm

Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.5.0 Description: A SQL injection issue allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php. This enables the attacker to potentially gain higher access level...

PT-2023-28583 · WordPress · Masterstudy Lms Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: MasterStudy LMS WordPress Plugin versions prior to 3.0.18 Description: The issue allows anyone to register on the site as an instructor due to improper checks during registration. This enables them to add courses and/or posts. Recommendations...

PT-2023-28714 · Unknown · Wpdatatables

Name of the Vulnerable Software and Affected Versions: wpDataTables versions prior to 2.1.66 Description: The issue concerns the deserialization of arbitrary data due to a lack of validation of the Serialized PHP array input data. This can potentially lead to remote code execution if a suitable...

PT-2023-28647 · WordPress · Url Shortify

Name of the Vulnerable Software and Affected Versions: URL Shortify WordPress plugin versions prior to 1.7.6 Description: The issue allows an unauthenticated attacker to inject malicious javascript that will trigger in the plugin's admin panel with statistics of the created short link, due to the...

PT-2023-31023 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: anything-llm version prior to 0.0.1 Description: The issue is related to an Authentication Bypass by Primary Weakness in the GitHub repository mintplex-labs/anything-llm. Recommendations: For versions prior to 0.0.1, update to version 0.0.1 o...

PT-2023-28303 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: Jeecg boot versions up to 3.5.3 Description: A SQL injection vulnerability was discovered in Jeecg boot via the component "/jeecg-boot/jmreport/show". This issue allows for SQL injection attacks, potentially leading to unauthorized access to...

Important: python3.11

Issue Overview: An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers such as HTTP servers that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer...

OPENSUSE-SU-2023:0244-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 116.0.5845.140 boo1214758: CVE-2023-4572: Use after free in MediaStream...

PT-2023-30712 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to v1.1.3 Description: The issue is related to missing authentication for a critical function in the GitHub repository answerdev/answer. This could potentially allow unauthorized access to sensitive data or...

protobuf-java: timeout in parser leads to DoS

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

PT-2023-25459

Name of the Vulnerable Software and Affected Versions Mava Software Hotel Management System versions prior to 2.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-4997 · Aruba · Aruba Airwave

Name of the Vulnerable Software and Affected Versions: Aruba AirWave versions prior to 8.0.7 Description: The issue allows for cross-site scripting XSS attacks against an administrator. This is due to a lack of protection measures for the web page structure, which can be exploited by a remote...

PT-2023-36254 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: amazon-ecs-init affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The update of amazon-ecs-init is intended to address this issue by rebuilding the package wi...