PT-2023-27039 · Buffalo America · Terastation Nas Ts5410R

Name of the Vulnerable Software and Affected Versions: Buffalo America, Inc. TeraStation NAS TS5410R versions 5.00 through 0.07 Description: The issue allows a remote attacker to obtain sensitive information via the guest account function. Recommendations: For versions 5.00 through 0.07, consider...

PT-2023-26855

Name of the Vulnerable Software and Affected Versions Apache Superset versions up to and including 2.1.0 Description The issue is related to stack traces for errors being enabled by default, resulting in the exposure of internal traces on REST API endpoints to users. This could potentially reveal...

PT-2023-28171 · Jenkins · Jenkins Job Configuration History Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Job Configuration History Plugin versions 1227.v7a 79fc4dc01f and earlier Description: The issue is related to the configuration of the XML parser in the Jenkins Job Configuration History Plugin, which does not prevent XML external...

PT-2023-4771 · Asus · Asus Rt-Ax56U V2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U V2 Description: A format string vulnerability is identified in the set iperf3 svr.cgi module of ASUS RT-AX56U V2, caused by lacking validation for a specific value within this module. This vulnerability can be exploited by a...

PT-2023-27740 · Unknown · Adlered Bolo-Solo

Name of the Vulnerable Software and Affected Versions: adlered bolo-solo version 2.6 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header. This can be done by uploading a file with malicious content, potentially...

PT-2023-23666 · Roundcube · Roundcube Password Recovery Plugin

Name of the Vulnerable Software and Affected Versions: Password Recovery plugin for Roundcube version 1.2 Description: The issue concerns the password recovery mechanism, which could allow a remote attacker to change an existing user's password by adding a 6-digit numeric token. Since the platfor...

PT-2023-25523 · Unknown +1 · Disintegration Imaging +1

Name of the Vulnerable Software and Affected Versions: Disintegration Imaging version 1.6.2 Description: The issue allows attackers to cause a panic due to an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. It is unclear whether there...

PT-2025-10402

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11., 11.0 through 11.0. Description The issue may cause MariaDB Server to crash with an empty backtrace log. This could be related to the make aggr tables info and optimize stage2 functions...

PT-2023-6523 · Apache · Apache Nifi Minifi C++

Name of the Vulnerable Software and Affected Versions: Apache NiFi MiNiFi C++ versions 0.13 through 0.14 Description: The issue is related to incorrect certificate validation in the InvokeHTTP component, allowing an intermediary to present a forged certificate during TLS handshake negotiation. Th...

PT-2023-27728 · Dwsurvey · Dwsurvey

Name of the Vulnerable Software and Affected Versions: DWSurvey DWSurvey-OSS versions 3.2.0 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file. This enables the attacker to upload...

PT-2023-27077 · Typora · Typora

Name of the Vulnerable Software and Affected Versions: Typora version 1.6.7 Description: A cross site scripting XSS issue in the Markdown Editor component allows attackers to execute arbitrary code via uploading a crafted Markdown file. Recommendations: For Typora version 1.6.7, consider disablin...

PT-2023-28019 · Grupposcai · Grupposcai Realgimm

Name of the Vulnerable Software and Affected Versions: GruppoSCAI RealGimm version 1.1.37p38 Description: Multiple reflected cross-site scripting XSS vulnerabilities in the ErroreNonGestito.aspx component allow attackers to execute arbitrary Javascript in the context of a victim user's browser vi...

How to disable Receiver for HTML5 in Cloud?

How to disable Receiver for HTML5 in Cloud?...

PT-2023-27980 · Tenda · Tenda Ac7 +2

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 1.0 V15.03.06.44 Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC5 version US AC5V1.0RTL V15.03.06.28 Description: A stack overflow issue was discovered via the time parameter at the "/goform/PowerSaveSet" API endpoint. Thi...

PT-2023-27669 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue is related to a Buffer Overflow that can be triggered via the function "sub 73004". Recommendations: For version 15.03.05.16, consider disabling the function "sub 73004" as a temporary...

PT-2023-27663 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue concerns a command execution vulnerability in the sub ADD50 function. This vulnerability is exploited when the formSetIptv function obtains the list and vlanId...

PT-2023-27665 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 multi TD01.bin Description: The issue concerns a command execution vulnerability in the sub ADF3C function. This vulnerability is exploited through the formSetIptv function, which obtains the list a...

PT-2023-27674 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0BR V15.03.05.16 Description: The issue concerns a Buffer Overflow that can be triggered via the function sub 7D858. Recommendations: For version 1.0BR V15.03.05.16, as a temporary workaround, consider disabling the sub...

PT-2023-7968 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

PT-2023-8675

Name of the Vulnerable Software and Affected Versions ZBar version 0.23.90 Description A heap-based buffer overflow exists in the qr reader match centers function. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this issue, an attacker can...