CVE-2023-0458

A speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or...

CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

PT-2023-18670 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: Silverstripe Framework versions prior to 4.12.15 Description: An attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Recommendations: For version...

PT-2023-12928 · Tooljet · Tooljet

Name of the Vulnerable Software and Affected Versions: Tooljet version 1.6 Description: The issue arises from the improper handling of missing values in the API, allowing attackers to send a crafted HTTP request to arbitrarily reset passwords. Recommendations: For Tooljet version 1.6, consider...

PT-2023-23001 · Unknown · Typed-Rest-Client

Name of the Vulnerable Software and Affected Versions: typed-rest-client versions 1.7.3 and earlier Description: The typed-rest-client library is vulnerable to leaking authentication data to third parties. This occurs when a request is sent with BasicCredentialHandler, BearerCredentialHandler, or...

PT-2023-22615 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.1 Description: The issue allows for Directory Traversal. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

CVE-2023-0045 Incorrect indirect branch prediction barrier in the Linux Kernel

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR on the function speculationctrlupdate, but the IBPB is only issued on the next...

PT-2023-02: Auth Path Traversal and Command Injection in account_print.cgi in Zyxel products

An issue was identified in Zyxel products affecting: USG FLEX ZLD V4.50-V5.35 и VPN ZLD V4.30-V5.35. Discovered vulnerability in accountprint.cgi can be exploited by an authenticated attacker with administrator privileges to execute unauthorized OS commands in the tmp directory if hotspot functio...

PT-2023-15430 · Fullworks · Fullworks Quick Contact Form

Name of the Vulnerable Software and Affected Versions: Fullworks Quick Contact Form plugin versions = 8.0.3.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 8.0.3.1, update t...

PT-2023-13900 · Ping Identity · Pingid Desktop

Name of the Vulnerable Software and Affected Versions: PingID Desktop versions prior to 1.7.4 Description: The issue allows attackers to bypass the maximum PIN attempts permitted before the time-based lockout is activated. This can be exploited in PingID Desktop. Recommendations: For versions pri...

PT-2023-20103 · WordPress · Oliver Schlöbe Simple Yearly Archive

Name of the Vulnerable Software and Affected Versions: Oliver Schlöbe Simple Yearly Archive plugin versions = 2.1.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Oliver Schlöbe Simple...

PT-2023-20097 · Podlove · Podlove Subscribe Button

Name of the Vulnerable Software and Affected Versions: Podlove Podlove Subscribe button plugin versions 1.3.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.3.7 a...

PT-2023-03: Unauth Buffer Overflow in fbwifi_forward.cgi in Zyxel products

An issue was identified in Zyxel products affecting: USG FLEX ZLD V4.50V5.35; USG FLEX 50W/ USG20W-VPN ZLD V4.30V5.35; VPN ZLD V4.30V5.35. Discovered vulnerability of Buffer Overflow in fbwififorward.cgi can be exploited by an unauthenticated attacker to cause a denial of service DoS conditions b...

PT-2023-20485 · Telindus · Telindus Apsal

Name of the Vulnerable Software and Affected Versions: Telindus Apsal version 3.14.2022.235 b Description: An issue was discovered in the Open Document feature, allowing an attacker to upload a crafted file and execute arbitrary code. Recommendations: For Telindus Apsal version 3.14.2022.235 b,...

PT-2023-19355 · WordPress · Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin

Name of the Vulnerable Software and Affected Versions: Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin plugin versions = 2.5.3 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inje...

Insufficiently Protected Credentials

Overview expo is an umbrella package that contains the client-side code for accessing system functionality such as contacts, camera, and location in Expo apps. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the Expo AuthSession Redirect Proxy process...

PT-2023-19802 · Riot-Os · Riot-Os

Name of the Vulnerable Software and Affected Versions: RIOT-OS versions prior to 2022.10 Description: The issue affects the network stack of RIOT-OS, an operating system for Internet of Things devices, which can process 6LoWPAN frames. An attacker can send a crafted frame, resulting in a large ou...

PT-2023-19799 · Riot-Os · Riot-Os

Name of the Vulnerable Software and Affected Versions: RIOT-OS versions prior to 2022.10 Description: The issue concerns a network stack in RIOT-OS that processes 6LoWPAN frames. An attacker can send a crafted frame, resulting in a NULL pointer dereference during the forwarding of a fragment. Thi...

PT-2023-22810

Name of the Vulnerable Software and Affected Versions Kiwi TCMS versions prior to 12.2 Description The issue allows users to upload attachments to test plans, test cases, etc., without control over the types of files that can be uploaded. A malicious actor may upload an .exe file or a file...

PT-2023-21585 · Avalanche · Avalanche

Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An unrestricted upload of file with a dangerous type vulnerability exists that could allow an attacker to achieve remote code execution. Recommendations: For Avalanche versions 6.3.x and below,...