PT-2023-9156 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.5.0 through 1.9.0 Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong, which could lead to Remote Code Execution. This vulnerability affects...

PT-2023-20412 · WordPress · My Youtube Channel

Name of the Vulnerable Software and Affected Versions: My YouTube Channel plugin versions = 3.23.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application th...

PT-2023-30619 · Unknown · Themepoints Accordion

Name of the Vulnerable Software and Affected Versions: Themepoints Accordion plugin versions prior to 2.7 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For Themepoints Accordion plugin...

PT-2023-30633 · Unknown · Codez Quick Call Button

Name of the Vulnerable Software and Affected Versions: Codez Quick Call Button plugin versions prior to 1.2.9 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions prior to 1.2.9,...

PT-2023-27201 · Pluggabl Llc · Pluggabl Llc Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: Pluggabl LLC Booster for WooCommerce plugin versions prior to 7.1.1 Description: The issue concerns exposure of sensitive information to unauthorized actors. Recommendations: For versions prior to 7.1.1, update to version 7.1.1 or later to...

PT-2023-30631 · WordPress · Tiencop Wp Extra

Name of the Vulnerable Software and Affected Versions: TienCOP WP EXtra plugin versions = 6.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

PT-2023-8700 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla versions 5.0.2 and below Joomla versions 4.4.2 and below Description: Inadequate content filtering in Joomla leads to multiple XSS vulnerabilities in various components. Attackers can trick administrators into clicking on a malicious...

PT-2023-21130 · WordPress · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka plugin versions = 3.29.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user i...

PT-2023-32248 · WordPress · Garden Gnome Package

Name of the Vulnerable Software and Affected Versions: Garden Gnome Package plugin for WordPress versions up to, and including, 2.2.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'ggpkg' shortcode due to insufficient input sanitization and output escaping on...

PT-2023-32085 · WordPress · Funnelforms Free

Name of the Vulnerable Software and Affected Versions: Funnelforms Free plugin for WordPress versions up to, and including, 3.4 Description: The issue allows authenticated attackers with subscriber-level permissions and above to modify data without authorization due to a missing capability check ...

PT-2023-32296 · WordPress · Easyrotator For Wordpress

Name of the Vulnerable Software and Affected Versions: EasyRotator for WordPress plugin versions up to, and including, 1.0.14 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's 'easyrotator' shortcode. This allows...

PT-2023-7201 · Apache · Apache Submarine

Name of the Vulnerable Software and Affected Versions: Apache Submarine versions 0.7.0 through 0.7.x Description: The issue is related to an SQL injection vulnerability in Apache Submarine when a user logs in, potentially allowing a remote attacker to execute arbitrary SQL queries, resulting in...

PT-2023-32474

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 8.0.0.27396 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

PT-2023-31571

Name of the Vulnerable Software and Affected Versions DRDrive versions prior to 20231006 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For version...

PT-2023-21134 · Unknown · Fluenx Deepl Api Translation Plugin

Name of the Vulnerable Software and Affected Versions: Fluenx DeepL API translation plugin versions = 2.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

PT-2023-12041 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: A security issue was found in Kibana where it failed to validate a user-supplied path, allowing the loading of .pbf files. This could enable a malicious user to traverse the Kibana host and...

SUSE CVE-2023-48232

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...

PT-2023-32203 · 3Dswymer · 3Dswymer

Name of the Vulnerable Software and Affected Versions: 3DSwymer versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2023x Description: The issue allows an attacker to execute arbitrary script code due to Stored Cross-site Scripting XSS vulnerabilities affecting 3DSwym in 3DSwymer. This enables the...

PT-2023-30699 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A heap overflow issue was discovered, allowing attackers to cause a Denial of Service DoS attack via the deviceId parameter in the saveParentControlInfo function. Recommendations: For Tenda AX1803...

PT-2023-30716 · Unknown · Websiteguide

Name of the Vulnerable Software and Affected Versions: WebsiteGuide version 0.2 Description: An issue with insecure permissions in WebsiteGuide allows a remote attacker to gain escalated privileges by using a crafted JSON web token jwt. Recommendations: For WebsiteGuide version 0.2, consider...