PT-2023-19751 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the contact parameter in the user profile update function. Recommendations:...

PT-2023-13535 · Unknown · Afs Analytics

Name of the Vulnerable Software and Affected Versions: AFS Analytics plugin versions prior to 4.19 Description: The issue is a Stored Cross-site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into the website, which will be executed by the user's browser. The...

PT-2023-15004 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2023-1902 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An...

PT-2025-18816

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc7-lku 23 Description A use-after-free bug has been identified in the Linux kernel, specifically in the refresh cache worker function. This bug occurred due to the improper handling of DFS root sessions in...

PT-2023-13504 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further details are available regarding the issue...

PT-2023-1872 · Unknown · Igss Dashboard +2

Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions V16.0.0.23040 and prior IGSS Dashboard versions V16.0.0.23040 and prior Custom Reports versions V16.0.0.23040 and prior Description: The issue is related to insufficient verification of data authenticity, which could...

PT-2023-35691 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as xmlCurrentChar,...

PT-2023-16799 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-16746 · Alpata · Alpata Licensed Warehousing Automation System

Name of the Vulnerable Software and Affected Versions: Alpata Licensed Warehousing Automation System versions through 2023.1.01 Description: The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection due to improper neutralization of...

PT-2023-21005 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: A cross-site scripting XSS issue exists in the /kruxton/navbar.php file, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

PT-2023-12205 · Wyomind · Wyomind Help Desk Magento 2 Extension

Name of the Vulnerable Software and Affected Versions: Wyomind Help Desk Magento 2 extension versions 1.3.6 and before Description: The issue allows attackers to escalate privileges via a crafted payload in the ticket message field. This is a Cross Site Scripting vulnerability. Recommendations: F...

Cross-Site Request Forgery (CSRF)

jenkins-2-plugins is vulnerable to Cross-Site Request Forgery CSRF. An attacker is able to trigger builds of jobs configured to use an attacker-specified Git repository and cause them to check out an attacker-specified commit...

PT-2023-12857 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-12840 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-35391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to a missing call to kasan arch is ready, which may cause an Oops error. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-12867 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-12860 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-12862 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

PT-2023-17492 · Ion · Ion

Name of the Vulnerable Software and Affected Versions: ion affected versions not specified Description: The issue is related to a possible escalation of privilege due to improper locking in ion. This could lead to local escalation of privilege with no additional execution privileges needed. User...