PT-2023-13535 · Unknown · Afs Analytics

Name of the Vulnerable Software and Affected Versions: AFS Analytics plugin versions prior to 4.19 Description: The issue is a Stored Cross-site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into the website, which will be executed by the user's browser. The...

PT-2025-18816

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc7-lku 23 Description A use-after-free bug has been identified in the Linux kernel, specifically in the refresh cache worker function. This bug occurred due to the improper handling of DFS root sessions in...

PT-2023-15004 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2023-1902 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An...

PT-2023-1872 · Unknown · Igss Dashboard +2

Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions V16.0.0.23040 and prior IGSS Dashboard versions V16.0.0.23040 and prior Custom Reports versions V16.0.0.23040 and prior Description: The issue is related to insufficient verification of data authenticity, which could...

PT-2023-13504 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further details are available regarding the issue...

PT-2023-35691 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as xmlCurrentChar,...

PT-2025-18852

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A use-after-free issue was found in the mptcp listener shutdown path in the Linux kernel. This issue can occur when the msk grace period expires between the last reference count drop...

PT-2023-16799 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-16746 · Alpata · Alpata Licensed Warehousing Automation System

Name of the Vulnerable Software and Affected Versions: Alpata Licensed Warehousing Automation System versions through 2023.1.01 Description: The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection due to improper neutralization of...

PT-2023-21005

Name of the Vulnerable Software and Affected Versions Best POS Management System version 1.0 Description A cross-site scripting XSS issue exists in the /kruxton/navbar.php file, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. Thi...

PT-2023-12205 · Wyomind · Wyomind Help Desk Magento 2 Extension

Name of the Vulnerable Software and Affected Versions: Wyomind Help Desk Magento 2 extension versions 1.3.6 and before Description: The issue allows attackers to escalate privileges via a crafted payload in the ticket message field. This is a Cross Site Scripting vulnerability. Recommendations: F...

Cross-Site Request Forgery (CSRF)

jenkins-2-plugins is vulnerable to Cross-Site Request Forgery CSRF. An attacker is able to trigger builds of jobs configured to use an attacker-specified Git repository and cause them to check out an attacker-specified commit...

PT-2023-19994 · Crmeb · Crmeb

Name of the Vulnerable Software and Affected Versions: CRMEB versions 1.3.4 and earlier Description: The issue is related to SQL Injection, which can be exploited via the "/api/admin/user/list" API endpoint. Recommendations: For CRMEB versions 1.3.4 and earlier, as a temporary workaround, conside...

PT-2023-12862 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

PT-2023-12666 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-12828 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

PT-2023-35391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to a missing call to kasan arch is ready, which may cause an Oops error. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-12867 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-12857 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...