PT-2023-2367 · Rockwell Automation · Modbus Tcp Server Aoi

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Modbus TCP Server AOI versions prior to 2.04.00 Description: The issue is related to the lack of protection for service data. An unauthorized user can send a malformed message, causing the controller to respond with a copy...

PT-2023-13535 · Unknown · Afs Analytics

Name of the Vulnerable Software and Affected Versions: AFS Analytics plugin versions prior to 4.19 Description: The issue is a Stored Cross-site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into the website, which will be executed by the user's browser. The...

PT-2023-13564 · Hewlett Packard · Hpe Flexfabric 5700 Switch Series

Name of the Vulnerable Software and Affected Versions: HPE FlexFabric 5700 Switch Series versions prior to R2432P61 Description: The issue concerns potential security vulnerabilities in the HPE FlexFabric 5700 Switch Series, which could be remotely exploited to allow host header injection and URL...

PT-2023-21557 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.9 and 3.2.6 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. A malformed SIP message containing a large Content-Length value and a specially crafted Request-URI causes a...

PT-2023-1881 · Unknown · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.3 Description: A vulnerability has been identified in the client query handler of the affected application, which fails to check for proper permissions for specific read queries. This could allow...

PT-2023-2170 · Zoom · Zoom Client For It Admin

Name of the Vulnerable Software and Affected Versions: Zoom Client for IT Admin macOS installers versions prior to 5.13.5 Description: The issue is related to a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the...

PT-2023-12735

Name of the Vulnerable Software and Affected Versions Firmanet Software and Technology Customer Relation Manager versions prior to 2022.03.13 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an...

PT-2023-19978 · Prestashop · Prestashop Ws Productreviews

Name of the Vulnerable Software and Affected Versions: PrestaShop ws productreviews versions prior to 3.6.2 Description: The issue is related to SQL Injection. Recommendations: For versions prior to 3.6.2, update to version 3.6.2 or later to resolve the issue...

PT-2023-1872 · Unknown · Igss Dashboard +2

Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions V16.0.0.23040 and prior IGSS Dashboard versions V16.0.0.23040 and prior Custom Reports versions V16.0.0.23040 and prior Description: The issue is related to insufficient verification of data authenticity, which could...

PT-2023-16869 · Hashicorp +1 · Nomad Enterprise +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Nomad and Nomad Enterprise versions 1.4.0 through 1.5.0 Description: A vulnerability was identified in Nomad and Nomad Enterprise such that a deny ACL capability could not be applied to a workload’s own variables. If included, the...

CVE-2023-25803

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability that allows the inclusion of server-side files. This issue is fixed in version 6.3.5.0...

PT-2023-16934 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: easyappointments versions prior to 1.5.0 Description: The issue is related to code injection in the GitHub repository alextselegidis/easyappointments due to unescaped output. This allows for potential code injection attacks. Recommendations:...

PT-2023-18644 · WordPress · Pixelyoursite

Name of the Vulnerable Software and Affected Versions: PixelYourSite PixelYourSite – Your smart PIXEL TAG Manager plugin versions = 9.3.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

SUSE-SU-2023:0705-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Update to 14.7: - CVE-2022-41862: Fixed memory leak in libpq bsc1208102...

PT-2023-16884 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore versions prior to 10.5.19 Description: The issue allows for Cross-site Scripting XSS - Reflected, which can potentially be used to steal a user's cookie, leading to unauthorized access to the user's account. It can also redirect users...

PT-2023-20983 · Halo · Halo

Name of the Vulnerable Software and Affected Versions: Halo versions up to 1.6.1 Description: The issue allows attackers to execute arbitrary code via a crafted .md file due to an arbitrary file upload vulnerability. Recommendations: For versions up to 1.6.1, update to a version later than 1.6.1 ...

PT-2023-14190 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 15.1 through 15.7.7 GitLab EE versions 15.8 through 15.8.3 GitLab EE versions 15.9 through 15.9.1 Description: An issue has been discovered in GitLab EE. If a group with SAML SSO enabled is transferred to a new namespace as...

PT-2023-2475 · Dnsmasq +9 · Dnsmasq +9

Name of the Vulnerable Software and Affected Versions: Dnsmasq versions prior to 2.90 Description: An issue was discovered in Dnsmasq where the default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 due to DNS Flag Day 2020. This issue may allow a remote attacker to cause a...

PT-2023-16004 · Proofpoint · Proofpoint Enterprise Protection

Name of the Vulnerable Software and Affected Versions: Proofpoint Enterprise Protection PPS/POD versions 8.20.0 and below Description: The webutils in Proofpoint Enterprise Protection contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'...

PT-2023-18755 · Smartbear · Smartbear Zephyr Enterprise

Name of the Vulnerable Software and Affected Versions: SmartBear Zephyr Enterprise versions through 7.15.0 Description: The issue is a privilege escalation vulnerability that could be exploited by authorized users to reset passwords for other accounts. Recommendations: For SmartBear Zephyr...