PT-2023-20903

Name of the Vulnerable Software and Affected Versions Competition Management System versions prior to 23.07 Description The issue allows for authentication abuse and bypass through an authorization bypass vulnerability. This is due to a user-controlled key in the Finex Media Competition Managemen...

PT-2023-15210 · Aram Kocharyan · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Aram Kocharyan Crayon Syntax Highlighter plugin versions = 2.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-19888 · Birddog · 4K Quad +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Files present on firmware images could allow an attacker to gain unauthorized access as a root user using hard-coded credentials. Recommendations: At th...

WordPress WP-Hijri Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP-Hijri Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-33320 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 103e8ad73e30 Credits Le Ngoc Anh Required...

PT-2023-35838 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes references to dxf fixup string, dwg dxf LAYOUT private, and dwg dxf LAYOU...

PT-2023-21772 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0 through 9.1 Description: A local user could obtain sensitive credential information when a detailed technical error message is returned in a stack trace. Recommendations: For IBM MQ versions 8.0 through 9.1, consider...

PT-2023-18746 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a local user to read user credentials stored in plain clear text. Recommendations: For IBM InfoSphere Information Server version 11.7, update the software to a versi...

Insecure Permissions

powerjob-server-starter is vulnerable to Insecure Permissions. The vulnerability exists because the library uses incorrect default permissions, which allows an attacker to gain sensitive information through the list job interface...

Arbitrary Code Execution

com.glazedlists:glazedlists is vulnerable to Arbitrary Code Execution. The vulnerability exists in the decode method of BeanXMLByteCoder, which allows a remote attacker to inject and execute arbitrary code because the decode method parses the XML string without any checks, resulting in improper X...

PT-2023-4784 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 watchOS affected versions not specified Description: An application may be able to bypass Privacy preferences due to...

PT-2023-2848 · 1с · 1С-Битрикс

Name of the Vulnerable Software and Affected Versions: 1С-Битрикс: Управление сайтом affected versions not specified Description: The issue is related to errors in processing input data in the built-in code editor of the 1С-Битрикс: Управление сайтом content management system. Exploitation of thi...

Cross-Site Scripting (XSS)

alextselegidis/easyappointments is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of sanitization in the legal settings, service names, and category names of the booking page, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

PT-2023-19741 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Recommendations: At the moment, there is no information about a newer...

PT-2023-23437 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A heap-use-after-free issue was discovered in yasm via the function expand mmac params at yasm/modules/preprocs/nasm/nasm-pp.c. Recommendations: For yasm version 1.3.0.55.g101bc, as a temporary...

PT-2025-31039 · Unknown +1 · Sequoia-Openpgp +1

Name of the Vulnerable Software and Affected Versions: sequoia-openpgp crate versions prior to 1.16.0 Description: The sequoia-openpgp crate contains a flaw that allows out-of-bounds array access, potentially leading to a panic. Recommendations: Update to sequoia-openpgp crate version 1.16.0 or...

PT-2023-36090 · Unknown · Crypto Secretbox

Name of the Vulnerable Software and Affected Versions: crypto secretbox affected versions not specified Description: The crypto secretbox crate has been forked and renamed from xsalsa20poly1305. The new repository location is available. Recommendations: At the moment, there is no information abou...

PT-2023-17584 · Isp · Isp

Name of the Vulnerable Software and Affected Versions: isp affected versions not specified Description: The issue is related to a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interacti...

PT-2023-13415 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-11922 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is unused by it...

PT-2023-11923 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment,...