PT-2023-32420

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 8.0.0.27396 Description The issue is related to an Improper Enforcement of Behavioral Workflow vulnerability, which allows for Functionality Bypass in DECE Software Geodi. Recommendations For versions prio...

PT-2023-32083 · WordPress · Funnelforms Free

Name of the Vulnerable Software and Affected Versions: Funnelforms Free plugin for WordPress versions up to, and including, 3.4 Description: The issue allows authenticated attackers with subscriber-level permissions and above to create copies of arbitrary posts due to a missing capability check o...

PT-2023-30701 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A heap overflow issue was discovered, allowing attackers to cause a Denial of Service DoS attack via the urls parameter in the saveParentControlInfo function. Recommendations: For Tenda AX1803 version...

SUSE CVE-2023-38711

An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6...

PT-2023-8889 · D Link · D-Link Dir-882

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 version DIR882A1 FW130B06 Description: The issue is caused by a stack overflow in the sub 477AA0 function of the D-Link DIR-882 router's firmware. This can allow a remote attacker to cause a denial of service or execute arbitra...

PT-2023-20550 · Tibco Software · Tibco Ebx +1

Name of the Vulnerable Software and Affected Versions: TIBCO EBX versions 5.9.22 and below TIBCO EBX versions 6.0.13 and below TIBCO Product and Service Catalog powered by TIBCO EBX versions 5.0.0 and below Description: The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO...

PT-2023-32512 · Unknown · Ics Business Manager

Name of the Vulnerable Software and Affected Versions: ICS Business Manager version 7.06.0028.7066 Description: A security issue has been identified, allowing a remote attacker to send a specially crafted string, exploiting the obdd act parameter. This could enable the attacker to steal an...

F5 Networks BIG-IP : TMM vulnerability (K20622530)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.4 / 14.1.2.8 / 15.1.0.5 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K20622530 advisory. - In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3,...

PT-2023-27244 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform version 2023.4 Description: The issue is related to an insecure job execution mechanism, which can lead to other attacks. This vulnerability may result in Denial of Service DoS or Cross-Site Scripting XSS attacks...

SUSE CVE-2021-2213

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

SUSE CVE-2021-35596

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Error Handling. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2023-47090

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

CVE-2023-47090

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is...

PT-2023-30006 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description: A command execution issue was discovered via the sub 41DD80 function, allowing for potential exploitation. Recommendations: For TOTOLINK X6000R version 9.4.0cu.652 B20230116, consider...

PT-2023-30079 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formSetLg. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the formSet...

PT-2023-29903 · Muller Digital · Duplicate Theme Plugin

Name of the Vulnerable Software and Affected Versions: Muller Digital Inc. Duplicate Theme plugin versions 0.1.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actio...

PT-2023-27037 · Npmjs · Node Email Check

Name of the Vulnerable Software and Affected Versions: NPMJS Node Email Check version 1.0.4 Description: The issue allows an attacker to cause a denial of service via a crafted string to the scpSyntax component. This can be exploited by sending a specifically designed string, leading to a denial ...

PT-2023-26326 · Unknown · Superwebmailer

Name of the Vulnerable Software and Affected Versions: SuperWebMailer version 9.00.0.01710 Description: The issue allows for Export SQL Injection via the size parameter. This enables potential attackers to inject malicious SQL code, potentially leading to unauthorized data access or modification...

Oracle MySQL Server 8.x <= 8.0.34 Security Update (cpuoct2023) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

UBUNTU-CVE-2023-22084

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...