PT-2023-32184 · Vriteio · Vrite

Name of the Vulnerable Software and Affected Versions: vriteio/vrite versions prior to 0.3.0 Description: The issue is related to improper input validation in the GitHub repository vriteio/vrite. Recommendations: For versions prior to 0.3.0, update to version 0.3.0 or later to resolve the issue...

PT-2023-26164 · Unknown · Chop-Chop Coming Soon Chop Chop

Name of the Vulnerable Software and Affected Versions: Chop-Chop Coming Soon Chop Chop plugin versions 2.2.4 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-19100 · WordPress · Wp Life Album Gallery

Name of the Vulnerable Software and Affected Versions: A WP Life Album Gallery – WordPress Gallery plugin versions = 1.4.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-20972 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue is related to a missing capability check on the check license functions, allowing authenticated attackers with subscriber-level permissions and abov...

PT-2023-21386 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 4.4.2 Description: The issue allows a remote authenticated attacker to obtain sensitive credential information using specially crafted XML input. Recommendations: For IBM Aspera Faspex version 4.4.2, update to a...

PT-2023-20983 · Halo · Halo

Name of the Vulnerable Software and Affected Versions: Halo versions up to 1.6.1 Description: The issue allows attackers to execute arbitrary code via a crafted .md file due to an arbitrary file upload vulnerability. Recommendations: For versions up to 1.6.1, update to a version later than 1.6.1 ...

PT-2023-14755 · WordPress · Twenty20 Image Before-After

Name of the Vulnerable Software and Affected Versions: Twenty20 Image Before-After WordPress plugin versions 1.5.9 and earlier Description: The issue concerns the Twenty20 Image Before-After WordPress plugin, which does not properly validate and escape some of its shortcode attributes before...

PT-2022-33508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the soundwire driver bind/unbind and callbacks. It was introduced in version v4.16 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibility hav...

PT-2022-22485 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes commit 8abf6be Description: A stack overflow issue was discovered in PNGDec. The issue is related to the /linux/main.cpp file. Recommendations: For versions prior to the version that includes...

PT-2022-23290 · Storeapps · Storeapps Affiliate For Woocommerce

Name of the Vulnerable Software and Affected Versions: StoreApps Affiliate For WooCommerce premium plugin versions = 4.7.0 Description: The issue allows an attacker to change the PayPal email due to an authenticated IDOR vulnerability. This can be exploited when the WooCommerce PayPal Payments...

PT-2022-13961 · Unknown +1 · Krakend-Ce +2

Name of the Vulnerable Software and Affected Versions: Lura versions prior to 2.0.2 KrakenD-CE versions prior to 2.0.2 KrakenD-EE versions prior to 2.0.0 Description: The issue arises from incorrect sanitization of URL parameters, allowing malicious users to alter the backend URL defined for a pi...

PT-2021-19862

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.16.1 Description The Nextcloud Android app is vulnerable to an issue where a malicious app on the same device could access the shared preferences of the Nextcloud Android application. This requires...

PT-2021-6569 · Gthumb +3 · Gthumb +3

Name of the Vulnerable Software and Affected Versions: gThumb versions prior to 3.10.1 Description: The issue is related to insufficient input validation in the gThumb image processing application. It allows a remote attacker to cause a denial of service via a malformed JPEG image. Recommendation...

PT-2016-2810

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.3 Description The issue is related to a password hashing error in the ssh network protocol. When SHA256 or SHA512 are used for user password hashing, a timing difference in responses can be leveraged by remote...

PT-2006-7535 · Gentoo +3 · Gentoo Linux +7

Name of the Vulnerable Software and Affected Versions: libnspr4 versions affected versions not specified libnss3 versions affected versions not specified nss versions prior to 3.11.3 libnspr-dev versions affected versions not specified libnss-dev versions affected versions not specified...