PT-2023-12185 · Erxes · Erxes

Name of the Vulnerable Software and Affected Versions: Erxes versions 0.22.3 and prior Description: Erxes, an experience operating system XOS with a set of plugins, is vulnerable to cross-site scripting. This results in client-side code execution. The victim must follow a malicious link or be...

PT-2023-20317 · Versionn · Versionn

Name of the Vulnerable Software and Affected Versions: versionn versions prior to 1.1.0 Description: The issue is a command injection vulnerability. It affects all versions of versionn prior to 1.1.0. This vulnerability allows for command injection, which can be exploited by attackers...

PT-2023-35992 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-12900 · Cvat · Cvat

Name of the Vulnerable Software and Affected Versions: CVAT versions prior to 2.0.1 Description: The issue allows an authenticated user to potentially enable information disclosure via network access due to server-side request forgery. Recommendations: For versions prior to 2.0.1, update to versi...

WordPress Profile Builder Plugin <= 3.9.0 is vulnerable to Sensitive Data Exposure

Software Profile Builder Type Plugin Vulnerable versions = 3.9.0 Fixed in 3.9.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-0814 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 43ad15dcf7ab Credits István Márton Required...

PT-2023-35001 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the shape of output reports. It was introduced in version v4.0 and fixed in version v6.1.9. The actual impact and attack plausibility have not yet been proven...

PT-2023-34936 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.1.11, update...

PT-2023-35079 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a module alias overflow in the sof-nau8825 module of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35006 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v6.1.8 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It was introduced in version v5.12 and fixed in version v6.1.9. The actual impact and attack plausibility...

PT-2023-34923 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to out-of-bounds reads in the wifi brcmfmac driver. It is noted that the actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-34998 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns a node refcount leak in the fwnode graph get next endpoint function. This problem was introduced in version v5.15 and is fixed in Linux Kernel version v6.1.9. The actual...

PT-2023-20171 · Unknown · Ra-Ui-Materialui +1

Name of the Vulnerable Software and Affected Versions: react-admin versions prior to 3.19.12 and 4.7.6 ra-ui-materialui versions prior to 3.19.12 and 4.7.6 Description: The issue affects all React applications built with react-admin and using the . This component outputs the field value using...

PT-2023-35105 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: A potential issue has been identified in the Linux Kernel, related to the get swap pages function in mm/swapfile. The actual impact and attack plausibility have not yet been proven...

PT-2023-34990 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential memory leak issue has been identified in the session setup of the cifs component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Privilege Escalation

github.com/pterodactyl/wings is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order fo...

PT-2023-18205 · Unknown · Uwbdatatxstatusevent

Name of the Vulnerable Software and Affected Versions: UwbDataTxStatusEvent versions prior to SMR Feb-2023 Release 1 Description: The issue is related to improper input validation, allowing attackers to launch certain activities. Recommendations: For versions prior to SMR Feb-2023 Release 1, upda...

PT-2023-18203 · Smr · Smr

Name of the Vulnerable Software and Affected Versions: Phone application versions prior to SMR Feb-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to access sensitive information. This is achieved via implicit broadcast. Recommendations: For...

PT-2023-18193 · Smr · Smr

Name of the Vulnerable Software and Affected Versions: SMR versions prior to Jan-2023 Release 1 Description: A hardcoded AES key is used to encrypt card emulation PINs in NFC, allowing attackers to access the PIN. Recommendations: For versions prior to Jan-2023 Release 1, update to Jan-2023 Relea...

PT-2023-1843 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to missing authentication when creating and managing the B&R APROL database, allowing unauthorized reading and modification of system configuration. This can be exploited...

PT-2023-14113 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0.0 through 9.3.0 Description: The issue allows a local user to obtain sensitive information from diagnostic files. Recommendations: For IBM MQ versions 8.0.0 through 9.3.0, update to a version that includes the fix for this...