PT-2023-9026

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.59 Description The issue is related to HTTP Response splitting in multiple modules in Apache HTTP Server, which allows an attacker to inject malicious response headers into backend applications, causing...

DEBIAN-CVE-2023-39516

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

PT-2023-27398 · Digita Information Technology · Smartrise Document Management System

Name of the Vulnerable Software and Affected Versions: Digita Information Technology Smartrise Document Management System versions prior to Hvl-2.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This...

PT-2023-22931 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.82.0 Description: The issue allows a remote attacker to intercept network traffic, including sensitive information, due to improper certificate validation. Recommendations: For versions prior to 6.1.82.0,...

PT-2023-24983 · Panasonic · Panasonic Kw Watcher

Name of the Vulnerable Software and Affected Versions: Panasonic KW Watcher versions 1.00 through 2.82 Description: The issue is related to a use after free vulnerability, which may allow attackers to execute arbitrary code. Recommendations: For Panasonic KW Watcher versions 1.00 through 2.82,...

PT-2023-27744 · China Mobile · China Mobile Intelligent Home Gateway

Name of the Vulnerable Software and Affected Versions: China Mobile Intelligent Home Gateway version v.HG6543C4 Description: An issue in the China Mobile Intelligent Home Gateway allows a remote attacker to execute arbitrary code via the authentication mechanism. Recommendations: For version...

PT-2023-27698 · Unknown · Knowstreaming

Name of the Vulnerable Software and Affected Versions: KnowStreaming version 3.3.0 Description: The issue allows unauthorized users to create a new user with an admin role, leading to Escalation of Privileges. Recommendations: For KnowStreaming version 3.3.0, update to a version that fixes the...

PT-2023-8553 · Sudo +7 · Sudo +7

Name of the Vulnerable Software and Affected Versions: Sudo versions prior to 1.9.15 Description: The issue is related to the authentication procedure in Sudo, which might allow row hammer attacks for authentication bypass or privilege escalation. This is because the application logic sometimes...

PT-2023-11794 · Bmc · Bmc Patrol Agent

Name of the Vulnerable Software and Affected Versions: BMC PATROL Agent versions prior to 20.08.00 Description: The issue allows local privilege escalation via vectors involving pconfig and the +RESTART -host options. Recommendations: For versions prior to 20.08.00, update to version 20.08.00 or...

PT-2023-22911 · Samsung · Knox Ai

Name of the Vulnerable Software and Affected Versions: Knox AI versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by attackers to gain unauthorized access to...

PT-2023-12365 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V4.0RTL V02.03.01.26 cn.bin Description: The issue allows attackers, who have the administrator password, to cause a denial of service device crash via a long string in the wifiPwd 5G parameter to "/goform/setWifi"...

PT-2023-22912 · Unknown · Phone/Messaging Storage Smr Sep-2023 Release 1

Name of the Vulnerable Software and Affected Versions: Phone and Messaging Storage SMR SEP-2023 Release 1 Description: The issue is related to improper authentication, allowing an attacker to insert arbitrary data into the provider. Recommendations: For Phone and Messaging Storage SMR SEP-2023...

PT-2023-22924 · Samsung · Samsung Blockchain Keystore

Name of the Vulnerable Software and Affected Versions: Samsung Blockchain Keystore versions prior to 1.3.13.5 Description: The issue is related to a Protection Mechanism Failure in the bc tui trustlet, allowing a local attacker to execute arbitrary code. Recommendations: For versions prior to...

PT-2023-22927 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the LocalProvider of Gallery, allowing an attacker to access data in the content provider. Recommendations: For versions prior to 14.5.01.2,...

PT-2023-25592 · Shirasagi · Shirasagi

Name of the Vulnerable Software and Affected Versions: SHIRASAGI versions prior to 1.18.0 Description: A reflected cross-site scripting issue allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product. This enables the...

PT-2023-28088 · Unknown · Neutron Smart Vms

Name of the Vulnerable Software and Affected Versions: Neutron Smart VMS versions prior to b1130.1.0.1 Description: The issue is an Authentication Bypass by Spoofing vulnerability in Neutron Smart VMS, allowing unauthorized access. Recommendations: For versions prior to b1130.1.0.1, update to a...

PT-2023-27331 · Vathemes · Vathemes Business Pro

Name of the Vulnerable Software and Affected Versions: Vathemes Business Pro theme versions = 1.10.4 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

PT-2023-5343 · Librey · Librey

Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit be59098abd119cda70b15bf3faac596dfd39a744 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files. This...

PT-2023-28509 · WordPress · User Activity Log

Name of the Vulnerable Software and Affected Versions: User Activity Log WordPress plugin versions prior to 1.6.6 Description: The issue is related to a lack of proper authorization in the User Activity Log WordPress plugin, allowing any authenticated users to export activity logs and retrieve...

PT-2023-22730 · Imagerecycle · Imagerecycle Pdf & Image Compression Plugin

Name of the Vulnerable Software and Affected Versions: ImageRecycle ImageRecycle pdf & image compression plugin versions = 3.1.10 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...