CVE-2023-6052

CVE-2023-6052 affects Tongda OA 2017 up to version 11.9. The vulnerability exists in an unknown function within general/system/censor_words/module/delete.php where manipulating the DELETE_STR parameter leads to SQL injection. Reports indicate the exploit has been disclosed publicly. The issue can...

Hitachi Energy eSOMS

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Hitachi Energy Equipment : eSOMS Vulnerabilities : Generation of Error Message Containing Sensitive Information, Exposure of Sensitive System Information to an Unauthorized Control Sphere 2...

PT-2023-24844 · Didier Stevens · Spamreferrerblock

Name of the Vulnerable Software and Affected Versions: Didier Sampaolo SpamReferrerBlock plugin versions = 2.22 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

PT-2023-30373 · Unknown · Web-Settler Social Feed

Name of the Vulnerable Software and Affected Versions: Web-Settler Social Feed | All social media in one place plugin versions 1.5.4.6 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privilege...

PT-2023-29435 · Unknown · The Bastion

Name of the Vulnerable Software and Affected Versions: The Bastion versions prior to 3.14.15 Description: The Bastion provides authentication, authorization, traceability, and auditability for SSH accesses. However, SCP and SFTP plugins do not honor group-based Just-In-Time JIT Multi-Factor...

PT-2023-23709 · Unknown · Kathy Darling Simple User Listing

Name of the Vulnerable Software and Affected Versions: Kathy Darling Simple User Listing plugin versions = 1.9.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices...

PT-2024-10: Cross-Site Scripting (DOM-based XSS) in Cacti

The vulnerability was identified in Cacti version 1.2.26 and below. It allows to bypass an earlier patch CVE-2023-39360. The vulnerability leads to a cross-site scripting attack XSS DOM-based. The vulnerability can be exploited by an authorized user and leads to the possibility of executing...

PT-2023-30378 · WordPress · Bainternet Shortcodes Ui

Name of the Vulnerable Software and Affected Versions: Bainternet ShortCodes UI plugin versions 1.9.8 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher permissions. There is no information provided about t...

PT-2023-32973 · Amazon · S2N-Quic

Name of the Vulnerable Software and Affected Versions: s2n-quic versions prior to 1.31.0 Description: The issue in s2n-quic results in unnecessary resource utilization when peers open streams beyond advertised limits. Recommendations: For versions prior to 1.31.0, upgrade to version 1.31.0 or lat...

PT-2023-7023

Name of the Vulnerable Software and Affected Versions PyArrow versions 0.14.0 through 14.0.0 Description The issue is related to the deserialization of untrusted data in IPC and Parquet readers, allowing arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather, or...

PT-2023-29980 · Jbig2Enc · Jbig2Enc

Name of the Vulnerable Software and Affected Versions: jbig2enc version 0.28 Description: A heap-use-after-free issue was discovered in jbig2enc via the function jbig2enc auto threshold using hash in the file src/jbig2enc.cc. Recommendations: For jbig2enc version 0.28, consider disabling the...

PT-2023-30318 · Bleachbit · Bleachbit

Name of the Vulnerable Software and Affected Versions: BleachBit for Windows versions 4.4.2 and earlier Description: BleachBit for Windows is vulnerable to a DLL Hijacking issue. This allows an attacker to run arbitrary code on every execution of BleachBit for Windows by placing a DLL in a specif...

CVE-2023-46851

CVE-2023-46851 affects Apache Allura 1.0.1–1.15.0, caused by importing attachments without restricting URL values, enabling reading of local files. This exposes internal files and can lead to exploits such as session hijacking or remote code execution. A fix is available in Allura 1.16.0. If upgr...

PT-2023-28419 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startTncActivity function within Samsung Account. This allows attackers to access arbitrary files with...

PT-2023-14762 · WordPress · Icegram Express

Name of the Vulnerable Software and Affected Versions: Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce versions through 5.5.2 Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects Icegram Express...

PT-2023-14588 · Solwin Infotech · User Blocker

Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Blocker versions 1.5.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the User Blocker software. Recommendations: For versions 1.5.5 and...

PT-2025-13348

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the drm/i915 component. The problem arises from the imbalance in calling drm vma node allow and drm vma node...

PT-2023-7225 · Tyk · Tyk Gateway

Name of the Vulnerable Software and Affected Versions: Tyk Gateway version 5.0.3 Description: The issue concerns a blind SQL injection in the api id parameter, allowing an attacker to access and dump the database via a crafted SQL query. This is related to the lack of protection measures for the...

PT-2025-18572 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the ipc pcie read bios cfg function. This function uses acpi evaluate dsm to obtain the wwan power state...

PT-2025-25930 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0+ Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the xfrm interface. This issue occurs when transmitting an skb with metadata dst attached, resulting...