PT-2023-1816 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to a use-after-free condition when handling USDZ files, potentially allowing an attacker to access sensitive information using a specially crafted USDZ file. This...

PT-2023-14313 · Suse · Suse Rancher

Name of the Vulnerable Software and Affected Versions: SUSE Rancher versions prior to 2.5.17 SUSE Rancher versions prior to 2.6.10 Description: A Improper Privilege Management vulnerability in SUSE Rancher allows users with access to the escalate verb on PRTBs to escalate permissions for any...

PT-2023-13650 · Netiq · Netiq Imanager

Name of the Vulnerable Software and Affected Versions: NetIQ iManager versions prior to 3.2.6 Description: A Cross-site Scripting XSS issue allows an attacker to execute malicious scripts on the user's browser. Recommendations: For versions prior to 3.2.6, update to version 3.2.6 or later to...

PT-2023-14768 · WordPress · Learnpress

Name of the Vulnerable Software and Affected Versions: LearnPress – WordPress LMS Plugin versions prior to 4.1.7.3.2 Description: A SQL Injection SQLi issue has been identified. This type of issue generally involves the manipulation of database queries, potentially allowing unauthorized access or...

CVE-2023-22483 cmark-gfm Quadratic complexity bugs may lead to a denial of service

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands,...

PT-2023-14880 · WordPress · Gs Logo Slider

Name of the Vulnerable Software and Affected Versions: GS Logo Slider WordPress plugin versions prior to 3.3.8 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins, due...

PT-2023-16277 · WordPress · My Youtube Channel

Name of the Vulnerable Software and Affected Versions: My YouTube Channel plugin for WordPress versions up to, and including, 3.0.12.1 Description: The issue is related to authorization bypass due to a missing capability check on the clear all cache function. This allows authenticated attackers...

PT-2023-14173 · WordPress · پلاگین پرداخت دلخواه

Name of the Vulnerable Software and Affected Versions: پلاگین پرداخت دلخواه WordPress plugin versions prior to 2.9.3 Description: The issue allows unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege user, such as an admin, visits a page fro...

PT-2023-16271 · Unknown · Healthchecks

Name of the Vulnerable Software and Affected Versions: healthchecks/healthchecks versions prior to 2.6 Description: The issue concerns an observable discrepancy in the healthchecks/healthchecks GitHub repository, which can lead to the exposure of sensitive information to unauthorized actors...

PT-2023-14698 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions prior to 1.6.0 Description: A reflected-XSS issue was discovered in the FileManager component. The issue occurs in the GET parameter filename when editing any file. Recommendations: For EyouCMS versions prior to 1.6.0, update...

PT-2023-14706 · Hundredrabbits · Hundredrabbits Left

Name of the Vulnerable Software and Affected Versions: Hundredrabbits Left version 7.1.5 Description: A cross site scripting XSS issue allows attackers to execute arbitrary code via the meta tag. Recommendations: For version 7.1.5, update to a newer version that contains a fix for this issue...

PT-2023-2276

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions prior to 1.5 Description The issue is related to the unlimited distribution of resources, which can be exploited by an attacker to trigger a denial of service DoS with a malicious upload or series of uploads...

PT-2023-18575 · Ibm · Ibm Robotic Process Automation For Cloud Pak

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation for Cloud Pak versions 20.12.0 through 21.0.4 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2023-33211 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a potential security vulnerability in the Bluetooth functionality. It is noted that the actual impact and attack plausibility have not yet been proven. The problem w...

PT-2023-33098 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an unbalanced fwnode reference count in the mdio device release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-33710 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a resource leak in an error handling path in the powerpc/52xx component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2023-33690 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the arm64 architecture in the Linux Kernel, specifically with the function is ttbrX addr being made noinstr-safe. The actual impact and potential for attack have not...

PT-2023-33143 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33503 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: A memory leak issue exists in the Linux Kernel. The issue was introduced in version v4.9 and is fixed in version v6.0.19. Recommendations: For versions prior to v6.0.19, update to version...

PT-2023-33238 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential security issue exists due to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...