PT-2023-32398 · Pkp · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to Cross-site Scripting XSS - Reflected, which occurs when an application includes user input in its responses without properly validating or encoding the input, allowin...

PT-2023-30249 · Crafter · Crater

Name of the Vulnerable Software and Affected Versions: crater versions 6.0.0 through 6.0.6 Description: The issue allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image, specifically through the "/api/v1/company/upload-logo"...

PT-2023-35551 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash state includes functions such as Calc Length, RunIns, and Instance Reset. Recommendation...

Denial Of Service (DoS)

libfrr.so is vulnerable to Denial of Service DoS. An insecure implementation of MPREACHNLRI processing allows an attacker to crash a vulnerable router by sending a specially crafted BGP UPDATE message with a malformed MPREACHNLRI attribute causing the router to crash...

PT-2023-29893 · Unknown · Internet Marketing Ninjas Internal Link Building Plugin

Name of the Vulnerable Software and Affected Versions: Internet Marketing Ninjas Internal Link Building plugin versions 1.2.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability...

PT-2023-35543 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the iasecc parse size, iasecc parse get tlv, and iasecc parse docp functions. No...

PT-2023-27121 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-27119 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-29902 · WordPress · Jeff Sherk Auto Login New User After Registration

Name of the Vulnerable Software and Affected Versions: Jeff Sherk Auto Login New User After Registration plugin versions = 1.9.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

Information Disclosure

github.com/grafana/google-sheets-datasource is vulnerable to Information Disclosure. The vulnerability is due to improper error message sanitization in googlesheets.go during the client.GetSpreadsheet function call. This potentially expose the Google Sheet API-key that is configured for the data...

PT-2023-28759 · Unknown · Stb Image.H

Name of the Vulnerable Software and Affected Versions: Nothings Stb Image.h version 2.28 Description: The issue allows a remote attacker to cause a denial of service via a crafted file to the stbi load gif main function. This is a Double Free vulnerability. Recommendations: For Nothings Stb Image...

PT-2023-30660 · WordPress · Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce for WordPress versions up to, and including, 7.1.0 Description: The issue allows authenticated attackers with subscriber-level capabilities or above to retrieve arbitrary sensitive site options due to insufficient...

ChatBot < 4.9.1 - Unauthenticated Blind SQL Injection

Description The plugin is vulnerable to SQL Injection via the $strid parameter in versions up to, and including...

CVE-2023-40153 Cross-site Scripting in DEXMA DEXGate

The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software...

PT-2023-29383 · Daisuke Takahashi · Opcache Dashboard Plugin

Name of the Vulnerable Software and Affected Versions: Daisuke TakahashiExtend Wings OPcache Dashboard plugin versions = 0.3.1 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentiall...

PT-2023-36273 · Runc · Runc

Name of the Vulnerable Software and Affected Versions: runc versions prior to 1.1.8 Description: The issue is related to the runc package, which has been updated to version 1.1.8. The update includes a rebuild of the package with the go 1.21 security release. Recommendations: For versions prior t...

PT-2023-29788 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Best Courier Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the update user function. This allows for potential malicious file uploads. No information is provided about t...

PT-2023-6296 · Oracle · Oracle Hospitality Opera 5

Name of the Vulnerable Software and Affected Versions: Oracle Hospitality Opera 5 versions 5.6 Description: The issue is related to insufficient input validation in the Opera component of Oracle Hospitality Opera 5. This can be exploited by a remote attacker to execute arbitrary code, potentially...

PT-2023-25753 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ versions V5.2cu.7594 B20200910 and before Description: The issue is related to command injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2023-12694 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue could disclose sensitive information to an attacker due to the transmission of data in clear text. Recommendations: For IBM Security Verify Privilege On-Premises...