PT-2023-23849 · WordPress · Gloriafood Restaurant Menu – Food Ordering System – Table Reservation

Name of the Vulnerable Software and Affected Versions: GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin versions prior to 2.3.7 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attack...

PT-2023-5389 · D Link · D-Link D-View 8

Name of the Vulnerable Software and Affected Versions: D-Link D-View 8 version 2.0.1.28 Description: The issue is related to the use of a static key for protecting JWT tokens in user authentication, which can allow an attacker to bypass security restrictions and gain unauthorized access to...

PT-2023-27520 · Go-Libp2P · Go-Libp2P

Name of the Vulnerable Software and Affected Versions: go-libp2p versions prior to 0.27.4 go-libp2p versions prior to 0.30.0 Description: A malicious actor can store an arbitrary amount of data in a remote node's memory by sending the node a message with a signed peer record. This memory does not...

PT-2023-27604 · Opto 22 · Snap Pac S1 Firmware

Name of the Vulnerable Software and Affected Versions: SNAP PAC S1 Firmware version R10.3b Description: The issue is related to the lack of a limit on the number of login attempts in the web server. This could allow for a brute-force attack on the built-in web server login. Recommendations: For...

PT-2023-23711 · Yoast · Yoast Seo

Name of the Vulnerable Software and Affected Versions: Yoast Yoast SEO: Local plugin versions = 14.8 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations: For versions = 14.8, update to a version higher than 14.8 to resolve the issue...

PT-2023-22071 · Ux Themes · Ux-Themes Flatsome Plugin

Name of the Vulnerable Software and Affected Versions: UX-themes Flatsome plugin versions = 3.16.8 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for reflected cross-site scripting attacks without authentication...

PT-2023-23660 · Walchem · Walchem Intuition 9

Name of the Vulnerable Software and Affected Versions: Walchem Intuition 9 firmware versions prior to v4.21 Description: The issue concerns improper authentication in the Walchem Intuition 9 firmware. Login credentials are stored in a format that could allow an attacker to use them as-is to login...

PT-2023-6986 · Icewarp · Icewarp Server

Name of the Vulnerable Software and Affected Versions: IceWarp Server version 11.4.6.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks via the color parameter...

PT-2023-11669 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue is related to a Buffer Overflow vulnerability in the psdParser::UnpackRLE function in PSDParser.cpp. This vulnerability allows remote attackers to cause a denial of service via the opening of a...

PT-2023-12359 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage versions prior to 1.18.0 Description: The issue is related to a null pointer dereference in the ReadPalette function located in PluginTIFF.cpp. This function is part of the FreeImage library, which is used for image processing. The...

PT-2023-4822 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: libtiff versions prior to 4.4.0 Description: The issue is related to the function TIFFReadDirectory in the libtiff library, which can cause a denial of service when processing a crafted TIFF file. This can allow a remote attacker to exploit t...

PT-2023-7628 · Asustor · Asustor Data Master

Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 4.0.6.RIS1 and below ASUSTOR Data Master ADM versions 4.1.0 and below ASUSTOR Data Master ADM versions 4.2.2.RI61 and below Description: The issue is related to improper privilege management in ASUSTOR Data...

PT-2023-12357 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage versions prior to 1.18.0 Description: The issue is related to a NULL pointer dereference vulnerability. It occurs via the FreeImage CloneTag function in FreeImageTag.cpp. Recommendations: For versions prior to 1.18.0, update to...

PT-2023-19663 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to v767 Description: A Cross-site Scripting XSS issue in the Special Days component allows an attacker to steal the session cookie value of admin users with little user interaction. Recommendations: For versions pri...

PT-2023-27114 · N.V.K.Inter Co. · Ibsg

Name of the Vulnerable Software and Affected Versions: N.V.K.INTER CO., LTD. NVK iBSG version 3.5 Description: A SQL injection issue was found via the a passwd parameter at the "/portal/user-register.php" API endpoint. This allows for potential exploitation of the system. Recommendations: For...

PT-2023-28584 · WordPress · User Activity Log

Name of the Vulnerable Software and Affected Versions: User Activity Log WordPress plugin versions prior to 1.6.7 Description: The issue allows an attacker to manipulate the client IP address value retrieved by the plugin, potentially hiding the source of malicious traffic. This is due to the...

PT-2023-27105

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06 Description A stack overflow issue was discovered via the list parameter in the set qosMib list function. This issue affects the Tenda AC8V4 router. Recommendations For Tenda AC8V4 version 16.03.34.06, consider...

PT-2023-6025 · Jenkins · Jenkins Fortify Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Fortify Plugin versions 22.1.38 and earlier Description: The issue is related to the failure to protect the web page structure, allowing a remote attacker to perform an HTML injection. This occurs because the error message for a form...

PT-2023-26767 · Chamilo · Chamilo

Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11 through 1.11.20 Description: A Cross Site Request Forgery CSRF issue allows a remote authenticated privileged attacker to execute arbitrary code. Recommendations: For Chamilo versions 1.11 through 1.11.20, update to a...

PT-2023-29269 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.6.3 Description: The issue is related to Cross-Site Request Forgery CSRF in the wallabag GitHub repository. This allows attackers to arbitrarily reset annotations, entries, and tags by sending a GET request to...