ELECOM WRC 安全漏洞

The ELECOM WRC is a home-ready network camera from ELECOM Japan. A security vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier versions, which stems from the presence of an information disclosure that could allow network-adjacent attackers with access to the affected product to...

PT-2023-25169 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: gitea versions prior to 1.19.4 Description: The issue is an Open Redirect vulnerability in the GitHub repository go-gitea/gitea. This vulnerability is most likely a post-auth redirect and is a POST-based request scenario, making it less likel...

PT-2023-25640 · Loxone · Loxone Miniserver Go Gen.2

Name of the Vulnerable Software and Affected Versions: Loxone Miniserver Go Gen.2 through 14.0.3.28 Description: The issue allows an authenticated operating system user to escalate privileges via the Sudo configuration, enabling the elevated execution of binaries without a password requirement...

PT-2023-23497 · Sage · Sage X3

Name of the Vulnerable Software and Affected Versions: Sage X3 version 12.14.0.50-0 Description: The issue is related to CSV Injection. Recommendations: For Sage X3 version 12.14.0.50-0, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2023-24951 · Jmarsden · Jsonij

Name of the Vulnerable Software and Affected Versions: jmarsden/jsonij versions 0.5.2 and earlier Description: The issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For versions 0.5.2 and earlier,...

Fedora: Security Advisory for kernel (FEDORA-2023-75b22000cd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Azure DevOps Server 安全漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. The following produc...

PT-2024-12592 · Live555 +1 · Live555 +1

Name of the Vulnerable Software and Affected Versions: live555 version 2023.05.10 Description: A heap-use-after-free issue was found in live555 while handling the SETUP. Recommendations: For live555 version 2023.05.10, at the moment, there is no information about a newer version that contains a f...

CVE-2023-2159

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmpbypass GET parameter in the URL equal to the md5-hashed homeurl in the default setting allows users to visit a site placed in maintenance mode th...

PT-2023-12484 · WordPress · The Better Search

Name of the Vulnerable Software and Affected Versions: The Better Search plugin for WordPress versions up to and including 2.5.2 Description: The issue allows unauthenticated attackers to import settings via forged requests, granted they can trick a site administrator into performing an action su...

PT-2023-21652 · WordPress · Reviewx

Name of the Vulnerable Software and Affected Versions: ReviewX plugin for WordPress versions up to, and including, 1.6.13 Description: The issue is related to privilege escalation due to insufficient restriction on the rx set screen options function. This allows authenticated attackers with minim...

PT-2023-23096 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23 Description: A critical issue has been found in the restore all sound file function, allowing for path traversal manipulation, such as '../filedir'. This issue requires local...

PT-2023-24605 · Multiversx · Mx-Chain-Go

Name of the Vulnerable Software and Affected Versions: mx-chain-go versions prior to 1.4.16 Description: The metachain cannot process a cross-shard miniblock. An invalid transaction with the wrong username on metachain is not treated correctly on the metachain transaction processor, which is a...

PT-2023-24423 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the DelDNSHnList interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, consider...

PT-2023-19527 · WordPress · Blog-In-Blog

Name of the Vulnerable Software and Affected Versions: Blog-in-Blog plugin for WordPress versions up to, and including, 1.1.1 Description: The issue allows editor-level and above attackers to include and execute arbitrary files on the server via a shortcode attribute, potentially bypassing access...

PT-2023-24284 · WordPress · Themeinprogress Wip Custom Login

Name of the Vulnerable Software and Affected Versions: ThemeinProgress WIP Custom Login plugin versions 1.2.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-8428 · Nextcloud +1 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 25.0.6 Nextcloud Server versions prior to 26.0.1 Description: A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout...

PT-2023-20975 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue is due to a missing capability check on the submit ticket function, allowing authenticated attackers to create a support ticket that sends the...

PT-2023-36083 · Redis · Redis

Name of the Vulnerable Software and Affected Versions: redis version 7.0.10 Description: A segmentation violation was discovered in the software. Recommendations: For redis version 7.0.10, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2023-23507 · Pax Technology · Rpa Technology Mobile Mouse

Name of the Vulnerable Software and Affected Versions: RPA Technology Mobile Mouse version 3.6.0.4 Description: The issue concerns Remote Code Execution RCE, allowing for potential code execution on affected devices. Recommendations: For RPA Technology Mobile Mouse version 3.6.0.4, at the moment,...