12770 matches found
PT-2023-28098 · WordPress · Directorist
Name of the Vulnerable Software and Affected Versions: Directorist – WordPress Business Directory Plugin with Classified Ads Listings versions 7.7.1 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Directorist –...
PT-2023-28414 · Samsung · Samsung Account
Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startEmailValidationActivity function within Samsung Account. This allows attackers to access arbitrary...
PT-2023-32282 · WordPress · Wd Widgettwitter
Name of the Vulnerable Software and Affected Versions: WD WidgetTwitter plugin for WordPress versions up to, and including, 1.0.9 Description: The issue arises from insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the plugin's...
PT-2025-18834 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.0-rc1 Description: A vulnerability in the Linux kernel has been resolved, related to the ACPI PPTT Processor Properties Topology Table. The issue occurred when the PPTT was absent from the system, causing th...
PT-2025-18876 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version containing the fix for the max subslices array-index-out-of-bounds access Description: A potential out-of-bounds access issue has been identified in the Linux kernel, specifically in the drm/i915/sse...
PT-2025-18872 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.0-20230221.rc0.git4.99b8246b2d71.300.fc37.s390x+debug Description: A vulnerability in the Linux kernel has been resolved, specifically in the net/iucv module. The issue is related to the size of interrupt...
PT-2025-18544 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A potential null pointer dereference issue has been identified in the Linux kernel, specifically in the drm vblank destroy worker function. This issue arises when drm vblank init...
PT-2023-28413 · Samsung · Samsung Account
Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startAgreeToDisclaimerActivity function within Samsung Account. This allows attackers to access arbitrar...
PT-2023-13999 · Unknown · Export Users Data Csv
Name of the Vulnerable Software and Affected Versions: Export Users Data CSV versions through 2.1 Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Export Users Data CSV. Recommendations: For versions through 2.1, update to a...
PT-2023-32244 · WordPress · Interact: Embed A Quiz On Your Site
Name of the Vulnerable Software and Affected Versions: Interact: Embed A Quiz On Your Site plugin for WordPress versions up to, and including, 3.0.7 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the 'interact-quiz' shortcode...
PT-2025-18842 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the scsi dh alua component. The leak occurs when alua rtpg queue fails in alua activate, causing the qdata...
PT-2025-13307 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a potential vm use-after-free in the Linux kernel, specifically in the drm/i915 component. This occurs when the vm is added to the vm xa table, making it visible to...
PT-2025-18556 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc1+ 174 Description: A vulnerability in the Linux kernel has been resolved, specifically in the scsi transport sas module. The issue occurs when transport add device fails in sas phy add, causing the kern...
PT-2025-25992 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0 Description: The issue is related to an out-of-range error in the aq vec index in the Linux kernel's Atlantic driver. The final update statement of a for loop exceeds the array range, and the dereference ...
PT-2023-29445 · 1E · 1E-Exchange-Commandlineping
Name of the Vulnerable Software and Affected Versions: 1E-Exchange-CommandLinePing instruction versions prior to v18.1 Description: The 1E-Exchange-CommandLinePing instruction does not properly validate the input parameter, allowing for a specially crafted input to perform arbitrary code executio...
PT-2023-19141 · Pixelgrade · Pixelgrade Comments Ratings Plugin
Name of the Vulnerable Software and Affected Versions: Pixelgrade Comments Ratings plugin versions prior to 1.1.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker to...
PT-2023-29388 · WordPress · The Video Gallery – Best Wordpress Youtube Gallery Plugin
Name of the Vulnerable Software and Affected Versions: Video Gallery – Best WordPress YouTube Gallery Plugin versions prior to 2.1.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...
PT-2023-30238 · WordPress · Avirtum Imagelinks Interactive Image Builder
Name of the Vulnerable Software and Affected Versions: Avirtum ImageLinks Interactive Image Builder for WordPress versions 1.5.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows f...
PT-2023-10831 · Unknown · Vaerys-Dawn Discordsailv2
Name of the Vulnerable Software and Affected Versions: Vaerys-Dawn DiscordSailv2 versions up to 2.10.2 Description: A critical issue was found in the Tag Handler component, leading to improper access controls due to manipulation. This issue affects some unknown functionality of the component...
PT-2023-15308 · Pluginpress · Pluginpress Shortcode Imdb
Name of the Vulnerable Software and Affected Versions: PluginPress Shortcode IMDB versions 6.0.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...