PT-2023-20243 · Ibm · Ibm Security Guardium Key Lifecycle Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Key Lifecycle Manager versions 3.0 through 4.1.1 Description: The issue allows a remote attacker to send specially crafted SQL statements, which could enable the attacker to view, add, modify, or delete information in th...

CVE-2015-10096

CVE-2015-10096 affects Zarthus IRC Twitter Announcer Bot up to version 1.1.0. The issue is a command injection in the function get_tweets (file lib/twitterbot/plugins/twitter_announcer.rb) caused by manipulation of the tweet argument. It can be triggered remotely; attack complexity is described a...

PT-2023-18627 · Pixedelic.Com · Pixedelic.Com Camera Slideshow Plugin

Name of the Vulnerable Software and Affected Versions: Manuel Masia | Pixedelic.Com Camera slideshow plugin versions = 1.4.0.1 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into otherwise trusted websites,...

PT-2023-16215 · WordPress · React Webcam Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: React Webcam WordPress plugin version 1.2.0 Description: The issue is related to the React Webcam WordPress plugin, which does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the...

PT-2023-18622 · Unknown · Rafael Dery Superior Faq Plugin

Name of the Vulnerable Software and Affected Versions: Rafael Dery Superior FAQ plugin versions = 1.0.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2025-18821 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.2.0 Description: A global-out-of-bounds issue has been identified in the Linux kernel's Bluetooth HCI component. The hci init stage sync function fails to properly validate the stage array, leading to potentia...

PT-2023-20309 · Unknown · Mighty Digital Nooz

Name of the Vulnerable Software and Affected Versions: Mighty Digital Nooz plugin versions prior to 1.6.0 Description: The issue is related to an Authenticated admin+ Cross-Site Scripting XSS vulnerability. This means that an attacker who has admin access can inject malicious scripts into the...

PT-2023-16613 · WordPress · Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: WordPress Shortcodes Plugin — Shortcodes Ultimate versions prior to 5.12.8 Description: The issue allows any authenticated users, such as subscribers, to retrieve arbitrary user meta, excluding the user pass, via the user shortcode. This...

Namespace fuse ignores font class attribute from tile data

Lines of code Vulnerability details Impact The fuse function present in the Namespace contract mints a new Namespace NFT based on the given character data that references Tray tiles owned by the caller. For each character, the implementation will use the characterToUnicodeBytes function from the...

[H-01] User that fuse more tiles to Namespace NFT pay lesser fusing costs instead of greater

Lines of code Vulnerability details Impact User that fuses more tiles will pay lesser fusing costs to revenueAddress instead of higher cost as intended Proof of Concept Namespace.solL110-L114 /Namespace.sol 110: function fuseCharacterData calldata characterList external 111: uint256 numCharacters...

A user can mint a PFP NFT multiple times using the same _nftId

Lines of code Vulnerability details Impact A user might unintentionally "intentionally" try to take advantage of the mint function in ProfilePicture.sol Proof of Concept The pfp mapping stores the pfp data per NFT, L31-32 of Profilepicture.sol /// @notice Stores the pfp data per NFT mappinguint25...

PT-2025-10753

Name of the Vulnerable Software and Affected Versions FreeType versions 2.13.0 and below Description FreeType is a free, high-quality, portable font engine. A vulnerability exists in versions 2.13.0 and below due to an out-of-bounds write when parsing font subglyph structures related to TrueType ...

Security Bulletin: Vulnerabilites in Java SE affect IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Virtual Environments and IBM Spectrum Protect for Space Management (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)

Summary IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Virtual Environments Data Protection for Microsoft Hyper-V and Data Protection for VMware, and IBM Spectrum Protect for Space Management can be affected by vulnerabilities in Java SE. Vulnerabilities include denial of...

CVE-2023-1448

Removed by vendor...

PT-2023-16784 · Persolus · Persolus

Name of the Vulnerable Software and Affected Versions: Persolus versions prior to 2.03.93 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2023-19734 · Centralite · Centralite Pearl Thermostat

Name of the Vulnerable Software and Affected Versions: Centralite Pearl Thermostat version 0x04075010 Description: A vulnerability in the Centralite Pearl Thermostat allows attackers to cause a Denial of Service DoS via a crafted Zigbee message. Recommendations: For Centralite Pearl Thermostat...

PT-2023-21574 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions 4.8 and prior Description: Contiki-NG is an open-source, cross-platform operating system for internet of things IoT devices. In the affected versions, an out-of-bounds write can occur in the BLE L2CAP module of the...

CVE-2023-28104 silverstripe/graphql Denial of Service vulnerability

silverstripe/graphql serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with...

PT-2023-13579 · WordPress · Social Login

Name of the Vulnerable Software and Affected Versions: Social Login WP plugin versions = 5.0.0.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-16540 · Omron · Omron Cj1M

Name of the Vulnerable Software and Affected Versions: Omron CJ1M unit versions 4.0 and prior Description: The issue is related to improper access controls on the memory region where the UM password is stored. An adversary can issue a PROGRAM AREA WRITE command to a specific memory region,...