12771 matches found
PT-2023-14615 · Intel · Intel Ema
Name of the Vulnerable Software and Affected Versions: IntelR EMA software versions prior to 1.9.0.0 Description: The issue is related to improper authorization in the IntelR EMA software, which may allow an authenticated user to potentially enable denial of service via local access...
PT-2023-13906 · Intel · Intel Ipp Cryptography
Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to incomplete cleanup in the IntelR IPP Cryptography software, which may allow a privileged user to potentially enable information disclosure via loca...
PT-2023-13476 · Sandisk +1 · Sandisk Ibi +1
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home versions prior to 9.4.0-191 Western Digital My Cloud Home Duo versions prior to 9.4.0-191 SanDisk ibi versions prior to 9.4.0-191 Description: An improper privilege management issue could allow an attacker to cau...
PT-2023-13004 · Intel · Intel Vroc
Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 7.7.6.1003 Description: The issue is related to incorrect default permissions in the IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local...
PT-2023-20518 · Pimcore · Pimcore
Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.21 Description: The issue is related to Cross-site Scripting XSS - DOM, which has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or...
PT-2023-15414 · WordPress · Fugu Maintenance Switch
Name of the Vulnerable Software and Affected Versions: Fugu Maintenance Switch plugin versions = 1.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...
PT-2023-20597 · Pimcore · Pimcore
Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.21 Description: The issue allows for the execution of JavaScript code on victim browsers, potentially leading to cookie theft and account takeover. Recommendations: For versions prior to 10.5.21, update ...
PT-2023-14923 · Unknown · Weston Embedded Uc-Ftps
Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-FTPs version 1.98.00 Description: An out-of-bounds read issue exists in the PORT command parameter extraction functionality. This can be triggered by a specially-crafted set of network packets, leading to denial of service...
PT-2023-13905 · Intel · Intel Qat Drivers
Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows versions prior to 1.9.0 Description: The issue is related to improper access control in IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loc...
PT-2023-21394 · Joruri Gw · Joruri Gw
Name of the Vulnerable Software and Affected Versions: Joruri Gw versions 3.2.5 and earlier Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via the Message Memo function of the affected product. Recommendations: For versions 3.2.5 and...
PT-2023-19140 · WordPress · Easy Sign Up
Name of the Vulnerable Software and Affected Versions: Easy Sign Up plugin versions prior to 3.4.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be stored on the...
PT-2023-13345 · Intel · Intel Nuc Pro Kit +6
Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kits affected versions not specified IntelR NUC Performance Kits affected versions not specified IntelR NUC Performance Mini PC affected versions not specified IntelR NUC 8 Compute Element affected versions not...
PT-2023-15086 · WordPress · Zia Imtiaz Custom Login Page Styler
Name of the Vulnerable Software and Affected Versions: Zia Imtiaz Custom Login Page Styler for WordPress plugin versions = 6.2 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can injec...
PT-2023-22945 · Sap · Sap Businessobjects Business Intelligence Platform
Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue is caused by insufficient input validation, allowing an unauthenticated attacker to redirect users to an untrusted site using a malicious link...
PT-2023-23357 · Gl.Inet · Gl.Inet
Name of the Vulnerable Software and Affected Versions: GL.iNet devices versions prior to 3.216 Description: An issue was discovered that reveals information about the Wi-Fi configuration, including the SSID and key, through an API endpoint. Recommendations: For versions prior to 3.216, update to...
PT-2023-19281 · WordPress · Kanban For Wordpress
Name of the Vulnerable Software and Affected Versions: Kanban for WordPress Kanban Boards for WordPress plugin versions = 2.5.20 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject...
PT-2023-19169 · WordPress · Joel James Lazy Social Comments
Name of the Vulnerable Software and Affected Versions: Joel James Lazy Social Comments plugin versions = 2.0.4 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts into the...
PT-2023-3317 · Schneider Electric · Powerlogic Ion7400 +4
Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic ION9000 versions affected versions not specified Schneider Electric PowerLogic ION7400 versions affected versions not specified Schneider Electric PowerLogic PM8000 versions affected versions not specified...
PT-2023-6979 · Unknown · Newsletters
Name of the Vulnerable Software and Affected Versions: Newsletter versions prior to 7.6.9 Description: The issue is a cross-site scripting vulnerability that allows a remote unauthenticated attacker to inject an arbitrary script. This can be exploited to conduct cross-site scripting attacks. The...
PT-2025-25885 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the openvswitch component. The issue occurs when the ovs dp cmd new function fails during datapath creation...