PT-2023-19976 · Unknown · Caton Prime

Name of the Vulnerable Software and Affected Versions: Caton Prime version 2.1.2.51.e8d7225049202303031001 Description: A critical issue affects the Ping Handler component, specifically the file "cgi-bin/tools ping.cgi?action=Command", where manipulation of the Destination argument leads to comma...

PT-2023-7445 · Canon · I-Sensys Mf640C Series +10

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware versions prior to Ver.11.05 Canon imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware versions prior to...

PT-2023-7377 · Fortinet · Fortinac-F +1

Name of the Vulnerable Software and Affected Versions: FortiNAC-F version 7.2.0 FortiNAC versions 9.4.2 and below FortiNAC versions 9.2 and earlier FortiNAC versions 9.1 and earlier FortiNAC versions 8.8 and earlier FortiNAC versions 8.7 and earlier Description: The issue is related to an imprope...

PT-2023-23349 · Smartdns · Smartdns

Name of the Vulnerable Software and Affected Versions: SmartDNS versions through 41 before 56d0332 Description: The issue is caused by a stack-based buffer overflow in the dns encode domain function in the dns.c file, allowing an out-of-bounds write via a crafted DNS request. This can be exploite...

PT-2023-12984 · Onos · Onos

Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered in ONOS where an intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading ...

PT-2023-2674 · Oracle · Oracle Graalvm Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM Enterprise Edition versions 20.3.9, 21.3.5, and 22.3.1 Description: The issue is related to insufficient input validation in the Native Image component of Oracle GraalVM Enterprise Edition, allowing an unauthenticated attacker...

PT-2023-3156 · Totolink · Totolink X18

Name of the Vulnerable Software and Affected Versions: TOTOLINK X18 version V9.1.0cu.2024 B20220329 Description: The issue is related to insufficient argument validation in the UploadFirmwareFile function of the TOTOLINK X18 router's firmware, allowing a remote attacker to execute arbitrary...

PT-2023-21016 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version V7.4cu.2313 B20191024 Description: A command injection issue was discovered via the downBw parameter at the "/setting/setWanIeCfg" API endpoint. This allows for potential exploitation. Recommendations: For TOTOlink...

PT-2023-19782 · Unknown · Notrinoserp

Name of the Vulnerable Software and Affected Versions: NotrinosERP version 0.7 Description: The issue is a SQL injection vulnerability that can be exploited via the OrderNumber parameter at the "/NotrinosERP/sales/customer delivery.php" API endpoint. This allows for potential unauthorized access ...

PT-2023-1828 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.0 and earlier Description: The issue is related to an out-of-bounds read operation in memory. Exploitation of this issue could allow an attacker to disclose sensitive information by using a specially...

PT-2023-16286 · Google · Youtube Embedded 1.2 Sdk

Name of the Vulnerable Software and Affected Versions: YouTube Embedded 1.2 SDK Description: The YouTube Embedded 1.2 SDK has a potential vulnerability in its binding logic. After binding to a service within the YouTube Main App, a remote context is created with the flags Context.CONTEXT INCLUDE...

PT-2023-21045 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue concerns the /api/v4/users/me/teams API endpoint, where Mattermost fails to honor the ShowEmailAddress setting. This allows an attacker with team admin privileges to obtain the...

PT-2023-16650 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A problematic issue was found in the software, affecting an unknown functionality of the file "admin/?page=orders/view order". The manipulation of the id argument leads to cross-site...

PT-2023-19952 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest stable, beta and tests-passed versions Description: Discourse is an open source discussion platform. A malicious user can cause a regular expression denial of service using a carefully crafted git URL...

PT-2023-12275 · Imcat · Imcat

Name of the Vulnerable Software and Affected Versions: imcat version 5.4 Description: The issue allows remote attackers to escalate privilege via a lack of token verification, which is a result of a Cross Site Request Forgery vulnerability. Recommendations: For imcat version 5.4, consider...

PT-2023-19071 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to and including 4.8 Description: The issue concerns an out-of-bounds write in the BLE-L2CAP module of Contiki-NG, an open-source operating system for IoT devices. This module handles packet fragmentation up to the...

PT-2023-16050 · Unknown · Orangescrum

Name of the Vulnerable Software and Affected Versions: OrangeScrum version 2.0.11 Description: The issue allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the application injects an attacker-controlled parameter into a system function...

PT-2023-11815

Name of the Vulnerable Software and Affected Versions square squalor versions prior to v0.0.0 Description A critical issue was found in square squalor, affecting an unknown part, leading to sql injection. The manipulation with the table name parameter is potentially vulnerable to SQL injection...

PT-2023-10118 · Unknown · Kassi Xingwall

Name of the Vulnerable Software and Affected Versions: kassi xingwall affected versions not specified Description: A critical issue has been found in kassi xingwall, affecting some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. Recommendation...

PT-2022-7118 · Unrar +5 · Unrar +5

Name of the Vulnerable Software and Affected Versions: UnRAR versions prior to 6.2.3 Description: The issue is related to the incorrect handling of symbolic links before accessing a file, which can be exploited by a remote attacker to gain access to confidential data. This can occur via symlink...