PT-2023-24349 · Kramerav · Kramerav Via Connect +1

Name of the Vulnerable Software and Affected Versions: KramerAV VIA Connect 2 and VIA Go 2 versions prior to 4.0.1.1326 Description: The issue allows for remote manipulation of the device by extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the...

PT-2023-14769 · Nootheme · Noo Timetable

Name of the Vulnerable Software and Affected Versions: NooTheme Noo Timetable plugin versions = 2.1.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. The estimated...

PT-2023-23243 · Ransom Christofferson · Pdq Csv Plugin

Name of the Vulnerable Software and Affected Versions: Ransom Christofferson PDQ CSV plugin versions prior to 1.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 1.0....

PT-2023-26716

Name of the Vulnerable Software and Affected Versions mAyaNet E-Commerce Software versions prior to 1.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-26889 · Unknown · Dangerzone

Name of the Vulnerable Software and Affected Versions: Dangerzone versions prior to 0.4.2 Description: The issue affects the Dangerzone CLI, where output from the container is logged to the user's terminal. If the container is compromised, an attacker may spoof messages in the terminal or change...

PT-2023-19574 · WordPress · I Thirteen Web Solution Wordpress Vertical Image Slider

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution WordPress vertical image slider plugin versions prior to 1.2.17 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts...

PT-2023-4652 · Phoenix Contact · Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACTs WP 6xxx series web panels versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute...

PT-2023-15265 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 13.0 Description: The issue is related to a missing bounds check in the camera driver, which could lead to a local denial of service. System execution privileges are needed to exploit this issue. Recommendations: For...

PT-2023-26401

Name of the Vulnerable Software and Affected Versions Hiroaki Miyashita Custom Field Template plugin versions = 2.5.9 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations For versions = 2.5.9, update to a version higher than 2.5.9 to...

PT-2023-26152 · WordPress · Woocommerce Shipping Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses plugin versions prior to 3.8.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for...

PT-2023-27982 · Omeka-S · Omeka-S

Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.3 Description: The issue concerns improper input validation in the omeka/omeka-s GitHub repository. This can lead to injection attacks, where special elements are not properly neutralized in output used by...

PHP < 8.0.30, 8.1.x < 8.1.22, 8.2.x < 8.2.9 Security Update - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PT-2023-22625 · Alt N Technologies · N-Central Server

Name of the Vulnerable Software and Affected Versions: N-able Technologies N-central Server versions prior to 2023.4 Description: The issue allows a local attacker to execute arbitrary code via the monitoring function of the server. Recommendations: For versions prior to 2023.4, update to version...

PT-2023-27926 · Unknown · Crafter Cms

Name of the Vulnerable Software and Affected Versions: CrafterCMS versions 3.1.0 through 3.1.27 CrafterCMS versions 4.0.0 through 4.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS...

SUSE-SU-2023:3144-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: python-tornado: - Security fixes: CVE-2023-28370: Fixed an open redirect issue in the static file handler bsc1211741 prometheus-blackboxexporter: - Use obscpio for go modules service - Set version number - Set build date from SOURCEDATEEPOCH - Update to...

PT-2023-23316 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS versions prior to 9.2.0 Description: The issue allows a local user to dump files under the user's home directory using the grep command. This is due to a vulnerability in the comman...

PT-2023-25988 · Pnpm · Pnpm

Name of the Vulnerable Software and Affected Versions: pnpm versions prior to 7.33.4 pnpm versions prior to 8.6.8 Description: The issue arises from how pnpm parses tar archives, allowing a tarball to be constructed that appears safe when installed via npm or parsed by the registry but is malicio...

CVE-2023-38594

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution...

VulnCheck KEV: CVE-2023-34478

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests. Mitigation: Update to Apache Shiro 1.12.0+ or 2.0.0-alpha...

PT-2023-36235 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon versions prior to 2.1.7 Description: The issue concerns conmon, where several bugs have been fixed, including leaking symbolic links in the opt socket path directory, oom handling issues, and OOM watcher for cgroupv2 oom kill events. T...