PT-2023-23616 · Fahad Mahmood · Fahad Mahmood Wp Docs

Name of the Vulnerable Software and Affected Versions: Fahad Mahmood WP Docs plugin versions prior to 1.9.9 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-25760 · Adm · Adm

Name of the Vulnerable Software and Affected Versions: ADM versions 4.0.6.RIS1 through 4.1.0 ADM versions 4.2.2.RI61 and below Description: The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and delete...

PT-2023-28998 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git. Description: The issue concerns an unverified password change in the GitHub repository instantsoft/icms2. Recommendations: For versions prior to 2.16.1-git, update to version 2.16.1-git or later...

PT-2023-18068 · Google · Android

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: In multiple locations, there is a possible bypass of a multi-user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution...

PT-2023-27362 · Libboron +1 · Libboron +1

Name of the Vulnerable Software and Affected Versions: Boron version 2.0.8 Description: The issue is a heap-based buffer overflow in the ur parseBlockI function at i parse blk.c. This overflow can occur in the libboron component of Boron. Recommendations: For Boron version 2.0.8, consider disabli...

WordPress Post Grid and Gutenberg Blocks Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure

Software Post Grid and Gutenberg Blocks Type Plugin Vulnerable versions = 2.2.50 Fixed in 2.2.51 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-40211 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 237eec33a500 Credits Mika...

PT-2023-21586 · Dsm · Dsm

Name of the Vulnerable Software and Affected Versions: Desktop & Server Management DSM versions prior to 2022.2 SU2 Description: The issue allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user. This could potentially lead to the execution of...

PT-2023-25526 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the column parameter of "index.php" in PHPJabbers Document Creator. Recommendations: For PHPJabbers Document Creator version 1.0, avoid using th...

PT-2023-15862 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "admin dynamic app mib errors" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of...

PT-2023-20409 · Unknown · Rigorous & Factory Pattern Dovetail Plugin

Name of the Vulnerable Software and Affected Versions: Rigorous & Factory Pattern Dovetail plugin versions 1.2.13 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Rigorous & Factory Pattern Dovetail plugin. This vulnerability requir...

PT-2023-4895 · Siemens · Jt Utilities +2

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to V11.4 JT Utilities versions prior to V13.4 Parasolid V34.0 versions prior to V34.0.253 Parasolid V34.1 versions prior to V34.1.243 Parasolid V35.0 versions prior to V35.0.177 Parasolid V35.1 versions prior to V35.1.0...

PT-2023-26569 · Npm · Import-In-The-Middle

Name of the Vulnerable Software and Affected Versions: import-in-the-middle versions prior to 1.4.2 Description: The import-in-the-middle loader works by generating a wrapper module on the fly, using the module specifier to load the original module and add some wrapping code. This allows for remo...

Authorization Bypass

gitlab is vulnerable to Authorization Bypasses. This vulnerability occurs due to a flaw in the way that GitLab handles Jira Connect Namespaces. An attacker can exploit this vulnerability to add or remove Jira Connect Namespaces, even if they do not have the required permissions. This can be used ...

Server-Side Request Forgery (SSRF)

gitlab is vulnerable to Server-Side Request Forgery SSRF. The vulnerability occurs when requests to the internal network for webhooks are enabled allowing an unauthenticated attacker to exploit it even on a gitlab instance where registration is disabled...

Improper Access Control

gitlab is vulnerable to Improper Access Control. This vulnerability allows unprivileged users using the REST API to change labels descriptions...

PT-2023-4279 · Cockpit Hq · Cockpit

Name of the Vulnerable Software and Affected Versions: cockpit-hq/cockpit versions prior to 2.6.3 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability in the cockpit-hq/cockpit GitHub repository. This vulnerability exists due to inadequate protection of the web...

PT-2023-27018 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue concerns a Cross-Site Scripting XSS problem. Recommendations: For PHPGurukul Online Security Guards Hiring System version 1.0, at the moment, there is no...

PT-2023-25483 · Total Cms · Total Cms

Name of the Vulnerable Software and Affected Versions: Total CMS version 1.7.4 Description: The issue allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function. This can be achieved by uploading a malicious PHP file, potentially leading to code execution...

PT-2023-14942 · Data Illusion Survey Software Solutions · Ngsurvey

Name of the Vulnerable Software and Affected Versions: Data Illusion Survey Software Solutions ngSurvey versions 2.4.28 and below Description: The issue allows for Denial of Service when a survey contains a "Text Field", "Comment Field", or "Contact Details". Recommendations: For versions 2.4.28...

PT-2023-35930 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 1. The crash state involves functions such as bit...