PT-2023-5790 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 29258 Description: The issue is related to sensitive information disclosure and manipulation due to missing authorization. This could allow an attacker to gain unauthorized access to protected information...

PT-2023-29317 · Unknown · Easy Address Book Web Server

Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue affects the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, and workzip of the "/addrbook.ghp" file, allowing an...

CVE-2023-5345 Use-after-free in Linux kernel's fs/smb/client component

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3fscontextparseparam, ctx-password was freed but the field was not set to NULL which could lead to double free. We recommend upgrading pas...

PT-2023-19665 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 767 and earlier Description: A Cross-site Request Forgery CSRF vulnerability allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. Recommendations...

PT-2023-20081 · WordPress · Gopi Ramasamy Wp Tell A Friend Popup Form Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy WP tell a friend popup form plugin versions = 7.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that th...

PT-2023-25946 · Ibm · Ibm Observability With Instana

Name of the Vulnerable Software and Affected Versions: IBM Observability with Instana versions 1.0.243 through 1.0.254 Description: The issue allows an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. Recommendations: For versions 1.0.243...

PT-2023-27318 · WordPress · Crudlab Wp Like Button

Name of the Vulnerable Software and Affected Versions: CRUDLab WP Like Button plugin versions = 1.7.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-23946 · Buddyboss · Buddyboss

Name of the Vulnerable Software and Affected Versions: BuddyBoss version 2.2.9 Description: The issue is a Cross-Site Scripting vulnerability that could allow a local attacker with basic privileges to execute a malicious payload through the name parameter, specifically when set to image.jpg. This...

PT-2023-28051 · WordPress · Mycryptocheckout

Name of the Vulnerable Software and Affected Versions: edward plainview MyCryptoCheckout plugin versions = 2.125 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-26392 · Cyle Conoly · Wp-Flybox

Name of the Vulnerable Software and Affected Versions: Cyle Conoly WP-FlyBox plugin versions = 6.46 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

PT-2023-26815 · Woocommerce · Thedotstore Banner Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Banner Management For WooCommerce plugin versions = 2.4.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

PT-2023-22891 · Evaluator · Evaluator

Name of the Vulnerable Software and Affected Versions: Evaluator versions prior to SMR Oct-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by local attackers. Recommendations: For versio...

PT-2023-27320 · WordPress · Futurio Extra

Name of the Vulnerable Software and Affected Versions: FuturioWP Futurio Extra plugin versions 1.8.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows the activation of arbitrary plugins. This can be exploited by tricking a user into performing...

PT-2023-27052 · Prestashop · Theme Volty Cms Category Chain Slider

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Slider module for PrestaShop versions up to 4.0.1 Description: The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Slider module for PrestaShop, allowing a guest to...

PT-2023-26162 · WordPress · Optimonk

Name of the Vulnerable Software and Affected Versions: OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin versions = 2.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

PT-2023-24253 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the parameter options within the WGET check function, which is vulnerable to OS command injection blind. Recommendations: For DTS Monitoring version 3.57.0, consider...

PT-2023-27051 · Prestashop +1 · Theme Volty Cms Testimonial Module +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Testimonial module for PrestaShop versions up to 4.0.1 Description: The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS Testimonial module for PrestaShop, allowing a guest to perform SQL...

PT-2023-24025 · Nxlog · Nxlog Manager

Name of the Vulnerable Software and Affected Versions: NXLog Manager version 5.6.5633 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. This is due to the lack o...

PT-2023-27049 · Prestashop +1 · Theme Volty Cms Category Chain Slider +1

Name of the Vulnerable Software and Affected Versions: Theme Volty CMS Category Chain Slider module for PrestaShop versions up to 4.0.1 Description: The issue is related to the improper neutralization of SQL parameters in the Theme Volty CMS Category Chain Slider module for PrestaShop. This allow...

PT-2023-26816 · Unknown · Thedotstore Fraud Prevention For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Fraud Prevention For Woocommerce plugin versions 2.1.5 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of authenticated users. This can...