PT-2023-23634 · WordPress · Wp Mail Smtp Pro

Name of the Vulnerable Software and Affected Versions: WP Mail SMTP Pro plugin for WordPress versions up to, and including, 3.8.0 Description: The issue is related to a missing capability check on the is print page function, which allows unauthorized access to data. This makes it possible for...

PT-2023-21124 · Unknown · Sami Ahmed Siddiqui Http Auth Plugin

Name of the Vulnerable Software and Affected Versions: Sami Ahmed Siddiqui HTTP Auth plugin versions 0.3.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

openVIVA c2 20220101 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Stored Cross-Site Scripting product: mb Support broker management solution openVIVA c2 vulnerable version: 20220801 CVE number: CVE-2022-39172 impact: Medium homepage:...

PT-2023-24025 · Nxlog · Nxlog Manager

Name of the Vulnerable Software and Affected Versions: NXLog Manager version 5.6.5633 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. This is due to the lack o...

PT-2023-29152 · Unknown · Gopi Ramasamy Onclick Show Popup Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Onclick show popup plugin versions prior to 8.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 8.1...

PT-2023-29168 · Fooplugins · Foogallery

Name of the Vulnerable Software and Affected Versions: FooPlugins FooGallery plugin versions = 2.2.44 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing the...

PT-2023-32975 · Unknown +1 · Torchserve +1

Name of the Vulnerable Software and Affected Versions: TorchServe versions 0.3.0 through 0.8.1 Description: The issue is related to the use of a vulnerable version of the SnakeYAML open source library, which potentially exposes users to unsafe deserialization of Java objects. This could allow thi...

PT-2023-20529 · Asyncua · Asyncua

Name of the Vulnerable Software and Affected Versions: asyncua versions prior to 0.9.96 Description: The issue is related to Improper Authentication, allowing access to Address Space without encryption and authentication. This is due to missing checks for services that require an active session...

PT-2023-29128 · Woocommerce · Dreamfox Media Payment Gateway Per Product For Woocommerce

Name of the Vulnerable Software and Affected Versions: Dreamfox Payment gateway per Product for WooCommerce plugin versions 3.2.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...

PT-2023-28100 · Unknown · Uniconsent Cmp

Name of the Vulnerable Software and Affected Versions: UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin versions prior to 1.4.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allo...

PT-2023-8826 · Hitachi · Hitachi Ops Center Common Services

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Common Services versions prior to 10.9.3-00 Description: The issue is related to an uncontrolled allocation of resources, which can be exploited by a remote attacker to cause a denial of service. This can lead to a disrupti...

PT-2023-29179 · WordPress · Jewel Theme Wp Adminify

Name of the Vulnerable Software and Affected Versions: Jewel Theme WP Adminify plugin versions 3.1.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. There is no information provided about the...

PT-2024-5217 · Libvpx +7 · Libvpx +7

Name of the Vulnerable Software and Affected Versions: libvpx versions prior to 1.13.1 Description: A heap overflow issue exists in libvpx when encoding a frame with larger dimensions than the originally configured size using VP9, potentially resulting in a heap overflow. Recommendations: For...

PT-2023-36331 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: flac versions prior to 1.4.0 Description: A Buffer Overflow issue exists in the bitwriter grow function, allowing remote attackers to execute arbitrary code through crafted input to the encoder. Recommendations: For versions prior to 1.4.0,...

CVE-2023-5265

CVE-2023-5265 concerns Tongda OA 2017. The vulnerability affects unknown functionality in the file general/hr/manage/staff_transfer/delete.php where manipulation of the TRANSFER_ID parameter enables SQL injection. The issue has been disclosed publicly and may be exploited. Affected versions are T...

PT-2023-28049 · Woocommerce · Pensopay Woocommerce Pensopay

Name of the Vulnerable Software and Affected Versions: Pensopay WooCommerce PensoPay plugin versions = 6.3.1 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-27327 · Google · Google Api

Name of the Vulnerable Software and Affected Versions: Modern Events Calendar lite plugin for WordPress versions up to, but not including, 7.1.0 Description: The issue is related to Stored Cross-Site Scripting via Google API key and Calendar ID due to insufficient input sanitization and output...

PT-2023-9221 · Composer +6 · Composer +6

Name of the Vulnerable Software and Affected Versions: Composer versions prior to 1.10.27 Composer versions prior to 2.2.22 Composer versions prior to 2.6.4 Description: The issue is related to the Composer dependency manager for PHP. Users publishing a composer.phar to a public web-accessible...

PT-2023-32037 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.18 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.18, update to version 3.1.18 ...

PT-2025-32119 · Unknown · Lte Network

Name of the Vulnerable Software and Affected Versions: LTE network affected versions not specified Description: A transient Denial-of-Service DoS condition can occur while processing a random-access response RAR containing an invalid Protocol Data Unit PDU length on an LTE network. A PDU is a uni...