PT-2023-31230 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the "/admin/nav/save" API endpoint. Recommendations: For JFinalCMS version 5.0.0, as a temporary...

PT-2023-26852 · Dell · Dell Rugged Control Center

Name of the Vulnerable Software and Affected Versions: Dell Rugged Control Center versions prior to 4.7 Description: The issue is related to improper access control. A local malicious standard user could potentially exploit this to modify content in an unsecured folder when product installation...

PT-2023-32623 · Tyler Technologies · Magistrate Court Case Management Plus

Name of the Vulnerable Software and Affected Versions: Tyler Technologies Magistrate Court Case Management Plus affected versions not specified Description: The issue allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the filename parameter in the...

PT-2023-29765 · Wipotec Gmbh · Comscale

Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: The issue allows unauthenticated attackers to read files from the underlying operating system and obtain directory listings due to a failure in validating user...

PT-2023-6235 · D Link · D-Link Dir-820L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-820L version 1.05B03 Description: The issue is related to inadequate access control in the firmware of D-Link DIR-820L routers. Exploitation of this issue could allow a remote attacker to execute arbitrary code. Recommendations: Fo...

PT-2023-6368 · D Link · D-Link Dar-7000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 version V31R02B1413C Description: The issue is related to a lack of protection against SQL query structure attacks in the /log/mailrecvview.php file of the D-Link DAR-7000 online behavior audit gateway. This can allow a remote...

PT-2023-32133 · Byzoro · Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description: A critical issue affects some unknown functionality of the file /log/download.php, where the manipulation of the file argument...

PT-2023-31987 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2 Description: A critical vulnerability was found in DedeBIZ, affecting an unknown part of the file /src/admin/tags main.php. The manipulation of the ids argument leads to SQL injection. It is possible to initiate the attack...

PT-2023-28909 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.1.2 Description: The issue concerns the PrestaShop Back office interface, where an employee can list all modules without any access rights due to the method ajaxProcessGetPossibleHookingListForModule not checkin...

PT-2023-5161 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

PT-2023-4666 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue affects FreeRDP clients only and is related to an integer underflow leading to a Denial of Service DOS vulnerability. When an insufficient blockLen ...

PT-2023-5246

Name of the Vulnerable Software and Affected Versions giflib version 5.2.1 Description The issue is related to a segmentation fault in the getarg.c component of the giflib library, which can be exploited to cause a denial of service. Recommendations For giflib version 5.2.1, consider updating to ...

PT-2023-26641 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: LangChain versions 0.0.231 through 0.0.246 Description: An issue in LangChain allows a remote attacker to execute arbitrary code via the prompt parameter. This enables the attacker to potentially gain control over the system, leading to sever...

PT-2023-27852

Name of the Vulnerable Software and Affected Versions Academy LMS version 6.0 Description A vulnerability has been found in the file /academy/home/courses, where the manipulation of the query/sort by argument leads to cross-site scripting. The attack can be initiated remotely. The vendor was...

PT-2023-23402 · Woocommerce · Stripe Payment Plugin For Woocommerce

Name of the Vulnerable Software and Affected Versions: Stripe Payment Plugin for WooCommerce versions up to, and including, 3.7.7 Description: The issue is related to authentication bypass due to insufficient verification of the user being supplied during a Stripe checkout through the plugin. Thi...

PT-2023-26574 · Campcodes · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/edit-services.php. The manipulation of the editid argument leads to SQL injection. The attack can be initiat...

PT-2023-4425 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.4.10 Description: The issue is related to the l2cap sock release function in the Linux kernel, specifically in the net/bluetooth/l2cap sock.c file. It involves a use-after-free error because the children of an...

PT-2023-25068 · Asus · Asus Rt-N10Lx Router

Name of the Vulnerable Software and Affected Versions: Asus RT-N10LX Router version 2.0.0.39 Description: A stack overflow issue was discovered via the url parameter at the "/start-apply.html" API endpoint. This issue only affects products that are no longer supported by the maintainer...

PT-2023-22395 · Unknown · Bestweather

Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, as a temporary workaround,...

PT-2023-22601 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the crit id parameter of the "edit criteria.php" file. This enables the attacker to potentially access and...