PT-2023-30797

Name of the Vulnerable Software and Affected Versions CF Software Oil Management Software versions prior to 20230912 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-30790

Name of the Vulnerable Software and Affected Versions Besttem Network Marketing Software versions prior to 1.0.2309.6 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-28145 · Shirasagi · Shirasagi

Name of the Vulnerable Software and Affected Versions: SHIRASAGI versions prior to 1.18.0 Description: The issue is related to a Post-Unicode normalization problem. This occurs when security checks are performed before Unicode normalization, allowing Unicode character equivalents to resurface aft...

PT-2023-15491 · Vtech · Vtech Iad604-Il +1

Name of the Vulnerable Software and Affected Versions: Bezeq Vtech NB403-IL version BZ 2.02.07.09.13.01 Vtech IAD604-IL versions BZ 2.02.07.09.13.01, BZ 2.02.07.09.13T, and BZ 2.02.07.09.09T Description: An issue was discovered that allows remote attackers to gain sensitive information via the...

Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

PT-2023-27719 · Cloudroits · Cloudroits Website Job Search

Name of the Vulnerable Software and Affected Versions: Cloudroits Website Job Search version 15.0 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary code via the name parameter in the controllers/main.py component. Recommendations: For Cloudroits Websit...

PT-2023-12128 · Ericsson · Ericsson Mobile Switching Center Server

Name of the Vulnerable Software and Affected Versions: Ericsson Mobile Switching Center Server MSC-S versions BC 18A and IS 3.1 through IS 3.1 CP21 Description: The issue allows relative path traversal via a specific parameter in the https request after authentication, which enables access to fil...

PT-2023-25662 · Opswat · Opswat Metadefender Kiosk

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK where long inputs were not properly processed, allowing remote attackers to cause a denial of service, resulting in a loss of...

PT-2023-31358 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Generic. Recommendations: For versions prior to 23.9.0, update to version 23.9.0 or later to resolve the issue...

PT-2023-25661 · Opswat · Opswat Metadefender Kiosk

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK. It has an unquoted service path that can be abused locally. Recommendations: For OPSWAT MetaDefender KIOSK version 4.6.1.9996,...

PT-2023-31349 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - DOM, which occurs when an application includes user input in its output without proper validation or escaping, allowing an attacker to inject...

PT-2023-28330 · Fit2Cloud · Fit2Cloud Rackshift

Name of the Vulnerable Software and Affected Versions: FIT2CLOUD RackShift version 1.7.1 Description: The issue allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list API endpoints. This enables attackers to potentially...

PT-2023-30780

Name of the Vulnerable Software and Affected Versions Aceka Company Management versions prior to 3072 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

PT-2023-14: Cross-site Scripting (XSS) in Anycomment.io

The vulnerability was identified in Anycomment.io versions before 1.6.1. The discovered vulnerability allows an attacker to inject code into a page processed by a user's browser, including JavaScript scripts. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 13.09.2023...

PT-2023-5160 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

PT-2023-15807 · Unknown · Control De Ciber

Name of the Vulnerable Software and Affected Versions: Control de Ciber version 1.650 Description: The issue is a Denial of Service condition that affects Control de Ciber through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up ...

PT-2023-5188 · Unknown · Qms Automotive

Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: A vulnerability has been identified in the affected application, allowing users to upload arbitrary file types. This could allow an attacker to upload malicious files, potentially leading t...

PT-2023-27908 · Sofarpc · Sofarpc

Name of the Vulnerable Software and Affected Versions: SOFARPC versions prior to 5.11.0 Description: SOFARPC is a Java RPC framework. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. The default configuration of the SOFARPC framework uses a...

PT-2023-26156 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions = 7.2.0 Description: The issue is related to insecure storage of sensitive information in the User Web Client of Wing FTP Server, allowing information elicitation. Recommendations: For versions = 7.2.0, update to a...

PT-2023-28142 · Piccolo · Piccolo

Name of the Vulnerable Software and Affected Versions: Piccolo versions 0.120.0 and prior Description: The implementation of BaseUser.login in Piccolo leaks enough information to a malicious user, allowing them to generate a list of valid users on the platform. This list can be used in a password...