Logic error in _transferAjnaRewards function

Lines of code Vulnerability details Context: ajna-core/src/RewardsManager.sol: 836 / 837: function transferAjnaRewardsuint256 rewardsEarned internal 838: // check that rewards earned isn't greater than remaining balance 839: // if remaining balance is greater, set to remaining balance 840: uint25...

PT-2023-21395 · Unknown · Liquid Speech Balloon

Name of the Vulnerable Software and Affected Versions: LIQUID SPEECH BALLOON versions prior to 1.2 Description: A cross-site request forgery CSRF issue allows a remote unauthenticated attacker to hijack the authentication of a user and perform unintended operations by having a user view a malicio...

PT-2023-13769 · Intel · Intel Sur

Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8989 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...

PT-2023-22648 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version 11.10.00.2211041355 Description: The issue concerns a hard-coded default password for the RTSP feed. Recommendations: For version 11.10.00.2211041355, consider changing the default password for t...

PT-2023-14615 · Intel · Intel Ema

Name of the Vulnerable Software and Affected Versions: IntelR EMA software versions prior to 1.9.0.0 Description: The issue is related to improper authorization in the IntelR EMA software, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13906 · Intel · Intel Ipp Cryptography

Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to incomplete cleanup in the IntelR IPP Cryptography software, which may allow a privileged user to potentially enable information disclosure via loca...

PT-2023-21394 · Joruri Gw · Joruri Gw

Name of the Vulnerable Software and Affected Versions: Joruri Gw versions 3.2.5 and earlier Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via the Message Memo function of the affected product. Recommendations: For versions 3.2.5 and...

PT-2023-13905 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows versions prior to 1.9.0 Description: The issue is related to improper access control in IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loc...

PT-2023-13476 · Sandisk +1 · Sandisk Ibi +1

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home versions prior to 9.4.0-191 Western Digital My Cloud Home Duo versions prior to 9.4.0-191 SanDisk ibi versions prior to 9.4.0-191 Description: An improper privilege management issue could allow an attacker to cau...

PT-2023-20518 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.21 Description: The issue is related to Cross-site Scripting XSS - DOM, which has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or...

PT-2023-14923 · Unknown · Weston Embedded Uc-Ftps

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-FTPs version 1.98.00 Description: An out-of-bounds read issue exists in the PORT command parameter extraction functionality. This can be triggered by a specially-crafted set of network packets, leading to denial of service...

PT-2023-15414 · WordPress · Fugu Maintenance Switch

Name of the Vulnerable Software and Affected Versions: Fugu Maintenance Switch plugin versions = 1.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...

PT-2023-19140 · WordPress · Easy Sign Up

Name of the Vulnerable Software and Affected Versions: Easy Sign Up plugin versions prior to 3.4.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be stored on the...

PT-2023-20597 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.21 Description: The issue allows for the execution of JavaScript code on victim browsers, potentially leading to cookie theft and account takeover. Recommendations: For versions prior to 10.5.21, update ...

PT-2023-13004 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 7.7.6.1003 Description: The issue is related to incorrect default permissions in the IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2023-15086 · WordPress · Zia Imtiaz Custom Login Page Styler

Name of the Vulnerable Software and Affected Versions: Zia Imtiaz Custom Login Page Styler for WordPress plugin versions = 6.2 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can injec...

PT-2023-13345 · Intel · Intel Nuc Pro Kit +6

Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kits affected versions not specified IntelR NUC Performance Kits affected versions not specified IntelR NUC Performance Mini PC affected versions not specified IntelR NUC 8 Compute Element affected versions not...

PT-2023-22945 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue is caused by insufficient input validation, allowing an unauthenticated attacker to redirect users to an untrusted site using a malicious link...

PT-2023-19281 · WordPress · Kanban For Wordpress

Name of the Vulnerable Software and Affected Versions: Kanban for WordPress Kanban Boards for WordPress plugin versions = 2.5.20 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject...

PT-2025-25905 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0 Description: A refcount bug in the Linux kernel has been resolved. The issue occurs during the SMC fallback process in the connect syscall, where the kernel replaces TCP with SMC and sets the clcsk-sk use...