PT-2023-23295 · WordPress · Mailarchiver

Name of the Vulnerable Software and Affected Versions: MailArchiver plugin for WordPress versions up to, and including, 2.10.1 Description: The issue is related to Stored Cross-Site Scripting via an email subject due to insufficient input sanitization and output escaping. This allows...

PT-2023-24723 · WordPress · Bhavik Patel Woocommerce Order Address Print Plugin

Name of the Vulnerable Software and Affected Versions: Bhavik Patel Woocommerce Order address Print plugin versions = 3.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into the website, potentially leading t...

PT-2023-27974 · Tenda · Tenda Ac7 +2

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 1.0 V15.03.06.44 Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC5 version 1.0RTL V15.03.06.28 Description: A stack overflow issue was discovered via the parameter list at the "/goform/SetIpMacBind" API endpoint. This issue...

PT-2023-24623 · WordPress · Woocommerce Box Office

Name of the Vulnerable Software and Affected Versions: WooCommerce Box Office plugin versions = 1.1.50 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by authenticated users with contributor or higher permissions. There is ...

PT-2023-5340 · Libxml2 +7 · Libxml2 +7

Name of the Vulnerable Software and Affected Versions: libxml2 versions prior to 2.11.0 Description: The libxml2 library contains a vulnerability where crafted XML input can cause a global buffer overflow via the xmlSAX2StartElement function. This can lead to a denial-of-service DoS condition. Th...

PT-2023-27069 · Bdcom · Bdcom Olt P3310D-2Ac

Name of the Vulnerable Software and Affected Versions: BDCOM OLT P3310D-2AC version 10.1.0F Build 69083 Description: A cross-site scripting XSS vulnerability in the device web interface, specifically the Log Query page, allows attackers to execute arbitrary web scripts or HTML via a crafted paylo...

PT-2023-27020 · Audimexee · Audimexee

Name of the Vulnerable Software and Affected Versions: AudimexEE version 15.0 Description: A full path disclosure issue was discovered. This means that the software may reveal the full path of files or directories on the server, potentially allowing attackers to gather sensitive information about...

PT-2023-27624 · Phpjabbers · Php Jabbers Restaurant Booking Script

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Restaurant Booking Script version 3.0 Description: The issue is related to user enumeration, which occurs during password recovery. A difference in messages could allow an attacker to determine if a user is valid or not, enabling ...

PT-2023-27621 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: The issue is related to user enumeration, which occurs during password recovery. A difference in messages could allow an attacker to determine if a user is valid or not, enabling a brute for...

PT-2023-27635 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: Libming version 0.4.8 Description: The issue allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function. Recommendations: For Libming version 0.4.8, consider disabling the makeswf function until a...

PT-2023-27632 · Phpjabbers · Phpjabbers Make An Offer Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Make an Offer Widget version 1.0 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid user...

PT-2023-24986 · Techview · Techview La-5570 Wireless Gateway

Name of the Vulnerable Software and Affected Versions: TechView LA-5570 Wireless Gateway version 1.0.19 T53 Description: An issue was discovered in the TechView LA-5570 Wireless Gateway, allowing physical attackers to gain escalated privileges via a telnet connection. Recommendations: For version...

PT-2023-17397 · Hitachi · Hitachi Hirdb Server With Addtional Function +2

Name of the Vulnerable Software and Affected Versions: Hitachi HiRDB Server versions before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02 Hitachi HiRDB Server With Addtional Function versions before 09-60-2M, before...

PT-2023-27498 · Unknown · Skylark App For Android +1

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead a user to...

PT-2023-27078 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: A stored cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter...

PT-2023-23906 · WordPress · Rednao Donations Made Easy – Smart Donations

Name of the Vulnerable Software and Affected Versions: RedNao Donations Made Easy – Smart Donations plugin versions = 4.0.12 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites, potentiall...

PT-2023-27516 · Unknown · Weblogic-Framework

Name of the Vulnerable Software and Affected Versions: weblogic-framework versions 0.2.3 and prior Description: The issue is related to a deserialization vulnerability that may lead to remote code execution. When the weblogic-framework receives the command echo, it directly deserializes the data...

PT-2023-20349 · Esri · Arcgis Enterprise Server

Name of the Vulnerable Software and Affected Versions: ArcGIS Enterprise Server versions 11.0 and below Description: The issue allows a remote, unauthorized attacker to submit a crafted query, potentially resulting in a low severity information disclosure. The disclosed information is limited to ...

PT-2023-26872 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through R19.3 SP3 22.24.5800.0 Description: A vulnerability in the Edge Gateway component could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to imprope...

PT-2023-26871 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through 9.6.2208.101 Description: A vulnerability in the Connect Mobility Router component could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A...