PT-2023-5875

Name of the Vulnerable Software and Affected Versions NetScaler ADC affected versions not specified NetScaler Gateway affected versions not specified Description An out-of-bounds memory buffer operation allows for the disclosure of sensitive information. This issue occurs when the software is...

PT-2023-29300 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial version 3.1.8 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the admin redirect url parameter of the user login function. This is a Cross Site Scripting XSS issue. Recommendations:...

PT-2023-27335 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.7 to 2.8.21 Description: The issue allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory. Recommendations: For Welcart e-Commerce versions 2.7 to 2.8.21, consider...

PT-2023-24932 · Unknown · Prestashop +1

Name of the Vulnerable Software and Affected Versions: Prestashop opartplannedpopup versions 1.4.11 and earlier Description: The issue allows remote attackers to run arbitrary SQL commands via the OpartPlannedPopupModuleFrontController::prepareHook method. This enables attackers to potentially...

PT-2023-15491 · Vtech · Vtech Iad604-Il +1

Name of the Vulnerable Software and Affected Versions: Bezeq Vtech NB403-IL version BZ 2.02.07.09.13.01 Vtech IAD604-IL versions BZ 2.02.07.09.13.01, BZ 2.02.07.09.13T, and BZ 2.02.07.09.09T Description: An issue was discovered that allows remote attackers to gain sensitive information via the...

PT-2023-25662 · Opswat · Opswat Metadefender Kiosk

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK where long inputs were not properly processed, allowing remote attackers to cause a denial of service, resulting in a loss of...

PT-2023-5188 · Unknown · Qms Automotive

Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: A vulnerability has been identified in the affected application, allowing users to upload arbitrary file types. This could allow an attacker to upload malicious files, potentially leading t...

PT-2023-27996 · Couchcms · Couchcms

Name of the Vulnerable Software and Affected Versions: CouchCMS version 2.3 Description: An open redirect issue exists in the sanitize url parameter, allowing attackers to redirect users to arbitrary websites via crafted URLs. Recommendations: For CouchCMS version 2.3, consider disabling the...

PT-2023-7513 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.62 Description: The issue is related to a use after free vulnerability in the Media Capture component of Google Chrome, which could potentially allow a remote attacker to exploit heap corruption...

PT-2023-27744 · China Mobile · China Mobile Intelligent Home Gateway

Name of the Vulnerable Software and Affected Versions: China Mobile Intelligent Home Gateway version v.HG6543C4 Description: An issue in the China Mobile Intelligent Home Gateway allows a remote attacker to execute arbitrary code via the authentication mechanism. Recommendations: For version...

PT-2023-16457 · WordPress · Metform Elementor Contact Form Builder

Name of the Vulnerable Software and Affected Versions: Metform Elementor Contact Form Builder for WordPress versions up to, and including, 3.3.1 Description: The issue allows authenticated attackers with subscriber-level capabilities or above to obtain sensitive information about arbitrary form...

PT-2023-5311 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 10.6 through 11.4 Description: The issue is related to insufficient input validation, which could allow a remote attacker to cause a denial of service. An authenticated user can exploit this issue due to imprope...

PT-2023-27974 · Tenda · Tenda Ac7 +2

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 1.0 V15.03.06.44 Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC5 version 1.0RTL V15.03.06.28 Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetIpMacBind" API endpoint. This issue...

PT-2023-21855 · Unknown · Easy Slider Revolution

Name of the Vulnerable Software and Affected Versions: Easy Slider Revolution plugin versions prior to 1.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can th...

PT-2023-18663 · WordPress · Tiempo.Com Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Tiempo.com WordPress plugin versions 0.1.2 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the page parameter is not properly sanitised and escaped before being outputted back in th...

PT-2023-24426 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.14 through 16.0.7 GitLab CE/EE versions 16.1 through 16.1.2 GitLab CE/EE versions 16.2 through 16.2.1 Description: A Regular Expression Denial of Service issue was discovered, allowing attackers to send crafted payload...

PT-2023-3876

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile EPMM versions prior to 11.10 Description The issue is related to an authentication bypass vulnerability in Ivanti Endpoint Manager Mobile EPMM, which allows unauthorized users to access restricted functionality o...

PT-2023-9043 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow issue was discovered in the frmL7ProtForm function, related to the page parameter. This could allow a remote attacker to impact the...

PT-2023-18027 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds write due to an integer overflow in the rw i93 send to upper function of rw i93.cc. This could lead to local escalation of privilege wit...

PT-2023-20516 · Unknown · Drogonframework/Drogon

Name of the Vulnerable Software and Affected Versions: drogonframework/drogon versions prior to the fixed version Description: The issue arises when untrusted user input is used to set request headers in the addHeader function, allowing an attacker to inject additional headers by adding r carriag...