CVE-2023-48307 Nextcloud Mail app vulnerable to Server-Side Request Forgery

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextcloud Mail app versions 2.2.8 and 3.3.0 contain a patch for...

PT-2023-31977 · WordPress · Chatbot

Name of the Vulnerable Software and Affected Versions: ChatBot plugin for WordPress versions up to, and including, 4.8.9 Description: The issue allows unauthenticated attackers to extract sensitive data, including confirmation of whether a user name exists on the site and order information for...

PT-2023-5412 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 Description: The issue is related to a stack overflow in the SetWLanRadioSecurity function, specifically via the TXPower and GuardInt parameters. This can potentially allow a remote attacker to impact the...

PT-2023-11661 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IOBit Malware Fighter version 8.0.2 Description: An issue was discovered in ImfHpRegFilter.sys, allowing local attackers to cause a denial of service DoS. Recommendations: For IOBit Malware Fighter version 8.0.2, consider updating to a newer...

PT-2023-27042 · Unknown · Leotheme Leoblog

Name of the Vulnerable Software and Affected Versions: LeoTheme leoblog versions up to 3.1.2 Description: The issue is related to a SQL injection vulnerability. It affects the component LeoBlogBlog::getListBlogs. There is no information provided about the estimated number of potentially affected...

PT-2023-26099 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev381-g817a848f6-master Description: A segmentation violation was discovered in the BM ParseIndexValueReplace function at /lib/libgpac.so. This issue affects the GPAC library. Recommendations: For GPAC version...

PT-2023-24976 · Telegram · Telegram

Name of the Vulnerable Software and Affected Versions: Telegram version 9.6.3 Description: The issue allows attackers to hide critical information on the User Interface by calling the function SFSafariViewController. This can potentially lead to users being unaware of important details...

PT-2023-25040 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: The issue is related to an Assertion Failure in the parser parse for statement start function at jerry-core/parser/js/js-parser-statm.c. This failure can occur due to a problem in the parsin...

PT-2023-21936 · Unknown · Escan Antivirus

Name of the Vulnerable Software and Affected Versions: eScan Antivirus version 22.0.1400.2443 Description: A problematic vulnerability was found in the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It...

PT-2023-23547 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: A use after free issue was discovered in the pp getline function at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-22231

Name of the Vulnerable Software and Affected Versions LangChain versions 0.0.0 through 0.0.131 Description The issue allows prompt injection attacks that can execute arbitrary code via the Python exec method. This is specifically related to the LLMMathChain chain in LangChain. Recommendations For...

PT-2023-17140 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability was found in the IOCTL Handler component of the library ObCallbackProcess.sys, affecting the function 0x222034/0x222038/0x22203C/0x222040. This leads to denial o...

PT-2023-20803 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6US W20EV4.0br v15.11.0.61068 1546 841 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetSysTime function. Recommendations: For Tenda W20E version 15.11.0.6US W20EV4.0br...

PT-2023-9852 · Tcpreplay +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.3 Description: The issue is related to the cidr2cidr function in the Tcpreplay utility, which can cause a denial of service when exploited by a remote attacker. This function is part of the PCAP file handler and is...

PT-2023-33500 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a use-after-free error in the qlcnic dcb enable function. This error occurs when the qlcnic dcb enable function fails, potentially leading to a security issue. The...

PT-2023-34473 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A memory leak issue was discovered in the test firmware init function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.14 and is...

PT-2022-27362 · Ip Com · Ip-Com Ew9

Name of the Vulnerable Software and Affected Versions: IP-COM EW9 version 15.11.0.149732 Description: A command injection issue was found in the cmd get ping output function. Recommendations: For IP-COM EW9 version 15.11.0.149732, as a temporary workaround, consider disabling the cmd get ping...

PT-2022-35280 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a NULL pointer dereference in the lt9611 connector init function. This problem has been identified but its actual impact and potential for attack have not been...

PT-2022-7425 · Sysstat +10 · Sysstat +10

Name of the Vulnerable Software and Affected Versions: sysstat versions 9.1.16 through 12.7.0 Description: The issue is related to the allocate structures function in sa common.c, which insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated f...

PT-2022-26218 · Pypi · D8S-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-networking version 0.1.0 Description: The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. Recommendations: F...