PT-2023-22148 · Dream Theme · The7

Name of the Vulnerable Software and Affected Versions: Dream-Theme The7 plugin versions prior to 11.6.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...

PT-2023-24328 · Datev Eg · Datev Eg Personal-Management System Comfort/Comfort Plus

Name of the Vulnerable Software and Affected Versions: DATEV eG Personal-Management System Comfort/Comfort Plus versions 15.1.0 through 16.1.1 P4 Description: A reflected cross-site scripting issue allows attackers to steal targeted users' login data by sending a crafted link. Recommendations: Fo...

PT-2023-36194 · Suse · Suse Linux Enterprise Micro

Name of the Vulnerable Software and Affected Versions: salt versions prior to 3006.0 python-jmespath affected versions not specified python-ply affected versions not specified Description: The issue is related to an update for salt that fixes several problems, including collections Mapping issues...

PT-2023-25003 · Sliver · Sliver

Name of the Vulnerable Software and Affected Versions: Sliver versions 1.5.x through 1.5.39 Description: The issue is related to an improper cryptographic implementation, allowing attackers to execute a man-in-the-middle attack via intercepted and crafted responses. This enables attackers to...

Denial Of Service (DoS)

@openzeppelin/contracts is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing authorization checks in Governor.sol , which allows an attacker to take the role of the proposer with authorization to cancel it...

PT-2023-25311 · K-Search · Ke Search

Name of the Vulnerable Software and Affected Versions: ke search extension versions prior to 4.0.3 ke search extension versions 4.1.x through 4.6.x before 4.6.6 ke search extension versions 5.x before 5.0.2 Description: The issue allows XSS via indexed data. Recommendations: For ke search extensi...

CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

Denial of service via HTTP/2 HEADERS frames padding

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.2. It is fixed in 1.20.0 and later releases. This vulnerability is caused by a logica...

Information Disclosure

github.com/minio/console is vulnerable to Information Disclosure. The vulnerability exists due to IconWithLabel.tsx because the unicode right to left character masks the original filename...

PT-2023-36091 · Users · Users

Name of the Vulnerable Software and Affected Versions: users affected versions not specified Description: The issue concerns the users crate, which has not been updated since 2020-10-08, and its developer appears to be inactive. Recommendations: At the moment, there is no information about a newe...

PT-2023-22374 · Unknown · Glitter Unicorn Wallpaper

Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app versions 7.0 through 8.0 Description: The issue allows unauthorized apps to request permission to modify data in the database that records user personal preferences. This data is loaded into memory when the app i...

PT-2023-13140 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...

PT-2023-24282 · WordPress · Crm Perks Contact Form Entries

Name of the Vulnerable Software and Affected Versions: CRM Perks Contact Form Entries plugin versions prior to 1.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This type of vulnerability allows an...

PT-2023-20088 · Anton Skorobogatov · Rus-To-Lat Plugin

Name of the Vulnerable Software and Affected Versions: Anton Skorobogatov Rus-To-Lat plugin versions 0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

PT-2023-21994

Name of the Vulnerable Software and Affected Versions CBOT Chatbot versions prior to Core: v4.0.3.4 CBOT Chatbot versions prior to Panel: v4.0.3.7 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing for Authentication Abuse and...

PT-2023-23968 · Adyen +1 · Adyen +1

Name of the Vulnerable Software and Affected Versions: Saleor Core versions prior to 3.7.68 Saleor Core versions prior to 3.8.40 Saleor Core versions prior to 3.9.49 Saleor Core versions prior to 3.10.36 Saleor Core versions prior to 3.11.35 Saleor Core versions prior to 3.12.25 Saleor Core...

PT-2023-22812 · Iris-Web · Iris-Web

Name of the Vulnerable Software and Affected Versions: iris-web versions prior to 2.2.1 Description: A stored Cross-Site Scripting XSS issue has been identified, allowing an attacker to inject malicious scripts into the application. These scripts are executed when a user visits the affected...

Remote Code Execution (RCE)

codeigniter4/framework is vulnerable to Remote Code Execution RCE. The vulnerability exists because the Validation.php does not properly validate the validation placeholders, which allows an attacker to inject and execute malicious code...

PT-2023-15324 · Xiligroup · Dev.Xiligroup.Com - Ms Plugin

Name of the Vulnerable Software and Affected Versions: dev.Xiligroup.Com - MS plugin versions 1.12.03 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

PT-2023-20423 · Unknown · Tim Eckel Read More Excerpt Link

Name of the Vulnerable Software and Affected Versions: Tim Eckel Read More Excerpt Link plugin versions = 1.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...