PT-2023-32541 · Dev Blog · Dev Blog

Name of the Vulnerable Software and Affected Versions: Dev blog version 1.0 Description: The issue allows an attacker to exploit a cross-site scripting XSS vulnerability through an unrestricted file upload, combined with a bad entropy of filenames. This enables the attacker to upload a malicious...

PT-2023-23683 · Elementor · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Essential Addons for Elementor Pro versions through 5.4.8 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-32110 · Mcafee · Epolicy Orchestrator

Name of the Vulnerable Software and Affected Versions: ePolicy Orchestrator versions prior to 5.10.0 CP1 Update 2 Description: A Cross Site Request Forgery issue allows a remote low privilege user to add a new user with administrator privileges to the ePO server, impacting the dashboard area of t...

CVE-2023-44358

Adobe Acrobat Reader versions 23.006.20360 and earlier and 20.005.30524 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...

PT-2023-29193 · Dell · Dell Repository Manager

Name of the Vulnerable Software and Affected Versions: Dell Repository Manager versions 3.4.3 and prior Description: The issue is related to an Improper Access Control vulnerability in the installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading t...

PT-2023-30560 · First · Dvrs

Name of the Vulnerable Software and Affected Versions: First Corporation's DVRs affected versions not specified Description: A missing authentication for critical function issue allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device...

PT-2023-7256 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier Description: The issue is related to an out-of-bounds read when parsing a crafted file, potentially allowing an attacker to execute code in the...

PT-2023-23661 · Intel · Intel Ofu

Name of the Vulnerable Software and Affected Versions: IntelR OFU software versions prior to 14.1.31 Description: The issue is related to improper access control in IntelR OFU software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-32510 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was marked as a duplicate and an accidental request. No further details are provided about the nature of the issue or its potential...

PT-2023-32504 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was mentioned on Twitter with a rejected reason of Accidental Request. No further details are provided about the issue itself...

PT-2023-32456 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was mentioned on Twitter with a rejected reason of Accidental Request. No further details are provided about the issue itself...

PT-2023-35577 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash occurs in the following functions: parse by block type, light read record, and light...

PT-2023-32473 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was mentioned on Twitter with a rejected reason of Accidental Request. No further details are provided about the issue itself...

PT-2023-26387 · Ibm · Ibm Cics Tx Advanced

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Advanced version 10.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2023-24218 · WordPress · Stop Referrer Spam

Name of the Vulnerable Software and Affected Versions: Krzysztof Wielogórski Stop Referrer Spam plugin versions prior to 1.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

Improper Validation Of Attestations Signature

github.com/slsa-framework/slsa-verifier is vulnerable to Improper Validation Of Attestations Signature. An attacker could exploit this vulnerability by creating a malicious package and publishing it to a public npm registry. When a user installs the package, the slsa-verifier would verify the...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

PT-2023-30428 · Unknown · Craft Members

Name of the Vulnerable Software and Affected Versions: craft members version 13.6.1 Description: The issue allows remote attackers to send malicious notifications to victims due to the leakage of channel access token. Recommendations: For version 13.6.1, consider restricting access to the craft...

PT-2023-30256 · Esptool · Esptool

Name of the Vulnerable Software and Affected Versions: esptool version 4.6.2 Description: An issue in esptool allows attackers to view sensitive information due to the use of a weak cryptographic algorithm. Recommendations: For esptool version 4.6.2, at the moment, there is no information about a...

PT-2023-23891 · WordPress · Wp Reactions Lite

Name of the Vulnerable Software and Affected Versions: WP Reactions Lite plugin versions 1.3.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Reactions Lite plugin. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WP...