PT-2023-32666 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...

PT-2023-32653 · Unknown · Bigprof Online Clinic Management System

Name of the Vulnerable Software and Affected Versions: BigProf Online Clinic Management System version 2.2 Description: A vulnerability has been discovered in the system, which does not sufficiently encode user-controlled input, resulting in persistent XSS through the /clinic/events view.php...

PT-2024-13084 · Peplink · Peplink Smart Reader

Name of the Vulnerable Software and Affected Versions: Peplink Smart Reader version 1.2.0 Description: An information disclosure vulnerability exists in the web interface /cgi-bin/debug dump.cgi functionality. A specially crafted HTTP request can lead to a disclosure of sensitive information. An...

How to Configure HTML5 storefront ica to disable microphone and multi-monitor access prompts

+ Getting prompt while logging on to HTML 5 enabled storefront page, as their end users do not use multimonitor, camera, microphoneThe users are HTML5 Users: ++ ++ ++ Changed configuration.js file in storefront server under the location:C:\Program files\Citrix\Receiver storefront\HTML5 Client...

PT-2023-32649 · Unknown · Voovi Social Networking Script

Name of the Vulnerable Software and Affected Versions: Voovi Social Networking Script version 1.0 Description: A SQL injection vulnerability has been reported, affecting the videos.php endpoint in the id parameter. This could allow a remote attacker to send a specially crafted SQL query to the...

PT-2023-30533 · WordPress · Registrationmagic

Name of the Vulnerable Software and Affected Versions: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login versions n/a through 5.2.2.6 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. The estimated...

PT-2023-9116 · Tenda · Tenda I6

Name of the Vulnerable Software and Affected Versions: Tenda i6 version 1.0.0.83856 Description: The issue is related to a buffer overflow vulnerability in the Wi-Fi router's microprogram, specifically in the /goform/WifiMacFilterSet component. This vulnerability can be exploited by a remote...

PT-2023-7869 · NetGear · Netgear Wnr2000V4

Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v4 version 1.0.0.70 Description: A Command Injection issue exists when using HTTP for SOAP authentication, allowing command execution after successful authentication. This can be exploited by sending specially crafted HTTP...

PT-2023-32485 · Unknown · Elijaa/Phpmemcachedadmin

Name of the Vulnerable Software and Affected Versions: elijaa/phpmemcachedadmin version 1.3.0 Description: A critical flaw has been identified, specifically related to a stored XSS vulnerability, allowing malicious actors to insert a carefully crafted JavaScript payload. The issue arises from...

PT-2023-29992 · Loytec Electronics Gmbh · Linx Configurator

Name of the Vulnerable Software and Affected Versions: LOYTEC electronics GmbH LINX Configurator all versions Description: The issue concerns the use of HTTP Basic Authentication in the LINX Configurator, which transmits usernames and passwords in base64-encoded cleartext. This allows remote...

PT-2023-27531

Name of the Vulnerable Software and Affected Versions EWWW Image Optimizer versions through 7.2.0 Description The issue is related to the exposure of sensitive information to an unauthorized actor. It only occurs when the debug.log is turned on. Recommendations For versions through 7.2.0, turn of...

PT-2023-31314 · Apache +1 · Apache Tiles +1

Name of the Vulnerable Software and Affected Versions: Apache Tiles versions 2 onwards Description: The issue arises from the lack of validation of the value set as the DefaultLocaleResolver.LOCALE KEY attribute on the session while resolving XML definition files. This can lead to possible path...

PT-2023-19518

Name of the Vulnerable Software and Affected Versions Zumtobel Netlink CCD Onboard version 3.74 Description A buffer overflow issue was discovered in the NetlinkWeb::Information::SetDeviceIdentification component. This issue affects the specified version of the Zumtobel Netlink CCD Onboard...

PT-2023-31017 · Openlink +1 · Openlink Virtuoso-Opensource +1

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: An issue in the box deserialize reusing function allows attackers to cause a Denial of Service DoS after running a SELECT statement. Recommendations: For openlink virtuoso-opensource...

PT-2023-8878 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: The issue is related to a stack overflow in the openlink virtuoso-opensource platform, which can be exploited by attackers to cause a Denial of Service DoS via crafted SQL statements...

PT-2023-8880 · Openlink +4 · Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: virtuoso-opensource version 7.2.11 Description: The issue is related to insufficient input processing in the box col len function, which can be exploited by a remote attacker to cause a Denial of Service DoS after running a SELECT statement...

PT-2023-8877 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: The issue is related to the box mpy function in openlink virtuoso-opensource, which allows attackers to cause a Denial of Service DoS after running a SELECT statement. This is due to...

UBUNTU-CVE-2022-41678

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

PT-2023-7349 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 12.1.3.15356 Description: A code execution issue exists in the Javascript saveAs API of Foxit Reader. This is due to the improper handling of specially crafted malformed files, which can lead to the creation of arbitrary...

PT-2023-28210 · Ca · Arcserve Udp

Name of the Vulnerable Software and Affected Versions: Arcserve UDP versions prior to 9.2 Description: The issue allows an unauthenticated remote attacker to exploit a path traversal vulnerability in the com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload function to upload arbitrary...