PT-2023-5968 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Autofill feature of Google Chrome, which may allow a remote attacker to bypass autofill restrictions. This can be achiev...

PT-2023-29173 · Rebing Oõ · Woocommerce Esto Plugin

Name of the Vulnerable Software and Affected Versions: Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin versions = 2.23.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...

PT-2023-29593 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 2.3.5 Description: The issue concerns the verification of server certificates. In affected versions, server certificates were not verified. Recommendations: For versions prior to 2.3.5, update to version 2.3.5...

PT-2023-29156 · Unknown · Nickduncan Contact Form

Name of the Vulnerable Software and Affected Versions: NickDuncan Contact Form plugin versions = 2.0.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-29524 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.34.7 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.34.7 Description: The Atos Unify OpenScape 4000 exposes sensitive information, potentially allowing lateral movement ...

PT-2023-29300 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial version 3.1.8 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the admin redirect url parameter of the user login function. This is a Cross Site Scripting XSS issue. Recommendations:...

FasterXML Vulnerability in Bamboo Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 9.1.0, 9.2.1, and 9.3.0 of Bamboo Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

jackson-databind Vulnerability in Bamboo Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 9.1.0, 9.2.1, and 9.3.0 of Bamboo Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

PT-2023-29130 · Unknown · Checkfront Online Booking System

Name of the Vulnerable Software and Affected Versions: Checkfront Online Booking System plugin versions = 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-27537 · Cluevo · Cluevo Lms

Name of the Vulnerable Software and Affected Versions: CLUEVO CLUEVO LMS, E-Learning Platform plugin versions = 1.10.0 Description: A Cross-Site Request Forgery CSRF issue affects the CLUEVO CLUEVO LMS, E-Learning Platform plugin. This issue allows an attacker to perform unintended actions on a...

PT-2023-22213 · WordPress · Fugu Maintenance Switch

Name of the Vulnerable Software and Affected Versions: Fugu Maintenance Switch plugin versions = 1.5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-5851 · Qvpn · Qvpn Windows +1

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.1.0.0518 Description: The issue is related to insufficient protection of credentials, which could allow local authenticated administrators to gain access to user accounts and sensitive data via unspecifi...

PT-2023-36274 · Yq · Yq

Name of the Vulnerable Software and Affected Versions: yq versions prior to 4.35.2 Description: The issue concerns a number parsing as float bug in JSON, string and null concatenation consistency, and an expression parsing issue. Other fixes include improvements to handling various file formats,...

PT-2023-8839 · Aiohttp +5 · Aiohttp +5

Name of the Vulnerable Software and Affected Versions: aiohttp versions prior to 3.8.6 Description: The HTTP parser in aiohttp has numerous problems with header parsing, which could lead to request smuggling. This issue is related to the handling of Content-Length values, improper handling of NUL...

PT-2023-29065 · Dell · Dell Smartfabric Storage

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric Storage Software versions 1.4 and earlier Description: The issue is related to an OS Command Injection Vulnerability in the CLI use of the more command. A local or remote authenticated attacker could potentially exploit this...

Security Bulletin: IBM Security Directory Suite has fixed a security vulnerability (CVE-2022-33160)

Summary A security vulnerability has been addressed in the IBM Security Directory Suite. Vulnerability Details CVEID:CVE-2022-33160 DESCRIPTION: IBM Security Directory Suite uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CV...

PT-2023-29320 · Unknown · Easy Chat Server

Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 3.1 and earlier Description: The issue arises from insufficient encryption of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is stored via the "POST" method at the...

PT-2023-20405 · Cage Web Design · Optimize Database After Deleting Revisions

Name of the Vulnerable Software and Affected Versions: CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin versions = 5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

PT-2023-27693 · Widestand · Widestand

Name of the Vulnerable Software and Affected Versions: WideStand versions prior to 5.3.5 Description: The issue is a Cross-site Scripting XSS reflected vulnerability. It generates one of the meta tags directly using the content of the queried URL, allowing an attacker to inject HTML/Javascript co...

PT-2023-29087 · Unknown · Small Crm In Php

Name of the Vulnerable Software and Affected Versions: Small CRM in PHP version 3.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Sma...