PT-2023-13650 · Netiq · Netiq Imanager

Name of the Vulnerable Software and Affected Versions: NetIQ iManager versions prior to 3.2.6 Description: A Cross-site Scripting XSS issue allows an attacker to execute malicious scripts on the user's browser. Recommendations: For versions prior to 3.2.6, update to version 3.2.6 or later to...

PT-2023-14768 · WordPress · Learnpress

Name of the Vulnerable Software and Affected Versions: LearnPress – WordPress LMS Plugin versions prior to 4.1.7.3.2 Description: A SQL Injection SQLi issue has been identified. This type of issue generally involves the manipulation of database queries, potentially allowing unauthorized access or...

CVE-2023-22483 cmark-gfm Quadratic complexity bugs may lead to a denial of service

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands,...

PT-2023-14173 · WordPress · پلاگین پرداخت دلخواه

Name of the Vulnerable Software and Affected Versions: پلاگین پرداخت دلخواه WordPress plugin versions prior to 2.9.3 Description: The issue allows unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege user, such as an admin, visits a page fro...

PT-2023-16271 · Unknown · Healthchecks

Name of the Vulnerable Software and Affected Versions: healthchecks/healthchecks versions prior to 2.6 Description: The issue concerns an observable discrepancy in the healthchecks/healthchecks GitHub repository, which can lead to the exposure of sensitive information to unauthorized actors...

PT-2023-14880 · WordPress · Gs Logo Slider

Name of the Vulnerable Software and Affected Versions: GS Logo Slider WordPress plugin versions prior to 3.3.8 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins, due...

PT-2023-16277 · WordPress · My Youtube Channel

Name of the Vulnerable Software and Affected Versions: My YouTube Channel plugin for WordPress versions up to, and including, 3.0.12.1 Description: The issue is related to authorization bypass due to a missing capability check on the clear all cache function. This allows authenticated attackers...

PT-2023-14698 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions prior to 1.6.0 Description: A reflected-XSS issue was discovered in the FileManager component. The issue occurs in the GET parameter filename when editing any file. Recommendations: For EyouCMS versions prior to 1.6.0, update...

PT-2023-14706 · Hundredrabbits · Hundredrabbits Left

Name of the Vulnerable Software and Affected Versions: Hundredrabbits Left version 7.1.5 Description: A cross site scripting XSS issue allows attackers to execute arbitrary code via the meta tag. Recommendations: For version 7.1.5, update to a newer version that contains a fix for this issue...

PT-2023-2276

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions prior to 1.5 Description The issue is related to the unlimited distribution of resources, which can be exploited by an attacker to trigger a denial of service DoS with a malicious upload or series of uploads...

PT-2023-18575 · Ibm · Ibm Robotic Process Automation For Cloud Pak

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation for Cloud Pak versions 20.12.0 through 21.0.4 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2023-33561 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the use of a proper request destructor for IPv6 in the mptcp component. It was introduced in version v5.6 and fixed in version v6.0.18. The actual impact and attack...

PT-2023-33266 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a possible use-after-free UAF condition in the ibmpex register bmc function. This condition may occur when the function fails. The actual impact and attack...

PT-2023-33169 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: A buffer overflow issue exists in the elem comparison of cfg80211, a WiFi configuration module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A potential security issue has been identified in the Linux Kernel, related to the ASoC: soc-pcm component. The issue involves a missing NULL check in BE reparenting. The actual impact and...

PT-2023-33209 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.82 Description: A potential memory leak was identified in the otx2 init tc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.1...

PT-2023-33195 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to an out of bounds check in the mvneta driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33246 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a NULL pointer dereference in the nilfs palloc commit free entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33552 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v6.0.17 Description: A use-after-free UAF issue was discovered in the clone dtr function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.4 and is...

PT-2023-33488 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: A refcount leak was discovered in the xgmiitorgmii probe function. The issue was introduced in version v4.19 and is fixed in Linux Kernel version v6.0.19. The actual impact and attack...