PT-2023-25060 · H3C · H3C Magic

Name of the Vulnerable Software and Affected Versions: H3C Magic B1STV100R012 affected versions not specified Description: A stack overflow in the EditWlanMacList function allows attackers to cause a Denial of Service DoS via a crafted POST request to the API endpoint. The issue is related to the...

PT-2023-18007 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue involves the possible use of unencrypted transport over cellular networks due to an insecure default value, potentially leading to remote information disclosure without requiring additional execution...

PT-2023-17943 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the handle set parameters ctrl function of hal socket.c due to an incorrect bounds check. This could lead to local information disclosure, requiring System...

PT-2023-17941 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the BuildSetConfig function of protocolimsbuilder.cpp due to a missing null check. This could lead to local information disclosure, requiring System executio...

PT-2023-17940 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible use-after-free UAF due to a logic error in the lwis i2c device disable function of lwis device i2c.c. This could lead to local escalation of privilege with no additional execution...

PT-2023-17986 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read in the remove sdp record function of btif sdp server.cc. This could lead to local information disclosure with no additional executi...

PT-2023-18010 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the ss ProcessReturnResultComponent function of ss MmConManagement.c, which could lead to a possible out of bounds read. This might result in remote information...

PT-2023-17858 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the cd CodeMsg function of cd codec.c, which could lead to remote code execution without requiring additional execution privileges. User interaction is not necessar...

PT-2023-22496 · WordPress · Jetpack

Name of the Vulnerable Software and Affected Versions: Jetpack WordPress plugin versions prior to 12.1.1 Description: The issue allows users with author roles or above to manipulate existing files on the site, including deleting arbitrary files. In rare cases, it can also lead to Remote Code...

PT-2023-21445 · WordPress · Codecolorer

Name of the Vulnerable Software and Affected Versions: CodeColorer WordPress plugin versions prior to 0.10.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, f...

PT-2023-23291 · WordPress · Mainwp Child

Name of the Vulnerable Software and Affected Versions: MainWP Child plugin for WordPress versions up to, and including, 4.4.1.1 Description: The issue allows unauthenticated attackers to extract sensitive data, including the entire installation's database, due to insufficient controls on the...

PT-2023-4060 · Siemens · Ruggedcom Rox Mx5000 +8

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.0 RUGGEDCOM ROX MX5000RE versions prior to V2.16.0 RUGGEDCOM ROX RX1400 versions prior to V2.16.0 RUGGEDCOM ROX RX1500 versions prior to V2.16.0 RUGGEDCOM ROX RX1501 versions prior to V2.16.0...

PT-2023-24671 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.7.18 Description: The mail validation in the registration process had flaws, allowing the construction of different mail addresses that result in the same address, which can be shared by multiple accounts...

PT-2023-22254 · WordPress · Tms Booking For Appointments/Events Calendar – Amelia

Name of the Vulnerable Software and Affected Versions: TMS Booking for Appointments and Events Calendar – Amelia plugin versions prior to 1.0.75 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scrip...

PT-2023-22258 · WordPress · Fancythemes Optin Forms

Name of the Vulnerable Software and Affected Versions: FancyThemes Optin Forms – Simple List Building Plugin for WordPress versions prior to 1.3.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Thi...

PT-2023-3656

Name of the Vulnerable Software and Affected Versions Apache Airflow ODBC Provider versions prior to 4.0.0 Apache Airflow MSSQL Provider versions prior to 3.4.1 Description The issue is related to insufficient input validation in the Apache Airflow MSSQL Provider and Airflow ODBC Provider modules...

PT-2023-22261 · WordPress · Steven A. Zahm Connections Business Directory

Name of the Vulnerable Software and Affected Versions: Steven A. Zahm Connections Business Directory plugin versions = 10.4.36 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. Recommendations: For Steve...

PT-2023-22141 · Pi Websolution · Pi Websolution Conditional Cart Fee Plugin

Name of the Vulnerable Software and Affected Versions: PI Websolution Conditional cart fee plugin versions 1.0.96 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For PI Websoluti...

PT-2023-22065 · WordPress · Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce plugin versions = 2.1.48 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability in the PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, and...

PT-2023-13738 · Tenda · Tenda Ac6 Ac1200 Smart Dual-Band Wifi Router

Name of the Vulnerable Software and Affected Versions: Tenda AC6 AC1200 Smart Dual-Band WiFi Router version 15.03.06.50 multi Description: A cross-site scripting XSS issue was found in the Parental Control module, specifically via the deviceId parameter. This allows for potential malicious script...