PT-2023-32951 · Php · Php

Name of the Vulnerable Software and Affected Versions: Base64 Encoder/Decoder WordPress plugin versions 0.9.2 and earlier PHP versions prior to 8.0.30 PHP versions prior to 8.1.22 PHP versions prior to 8.2.8 Description: The issue concerns a lack of CSRF check in the Base64 Encoder/Decoder...

PT-2023-29902 · WordPress · Jeff Sherk Auto Login New User After Registration

Name of the Vulnerable Software and Affected Versions: Jeff Sherk Auto Login New User After Registration plugin versions = 1.9.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-29683 · Fastwpspeed · Fast Wp Speed

Name of the Vulnerable Software and Affected Versions: Fastwpspeed Fast WP Speed plugin version 1.0.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites, potentially leading to unauthoriz...

PT-2023-28806 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the Top Directory parameter in the File Picker Menu component. This enables the attacker to injec...

PT-2023-29292 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.4.59197 Description: A Cross-Site Scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. This enables the attacker to potentially perform unauthorized...

PT-2023-12108 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector Installer and Uninstallers for Windows versions prior to 3.6 Description: The issue is related to an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges...

PT-2023-29813 · Wbce Cms · Wbce Cms

Name of the Vulnerable Software and Affected Versions: WBCE CMS versions 1.6.1 and earlier Description: A Cross Site Scripting XSS issue allows a remote attacker to escalate privileges via a crafted script to the website footer parameter in the "admin/settings/save.php" component. Recommendations...

PT-2023-7181 · Ibm · Ibm Cognos Dashboards On Cloud Pak For Data

Name of the Vulnerable Software and Affected Versions: IBM Cognos Dashboards on Cloud Pak for Data version 4.7.0 Description: The issue is caused by a reverse tabnabbing flaw, which could allow a remote attacker to bypass security restrictions. An attacker could exploit this and redirect a victim...

PT-2023-26330 · Unknown · Superwebmailer

Name of the Vulnerable Software and Affected Versions: SuperWebMailer version 9.00.0.01710 Description: An issue was discovered that allows for XSS via a GET parameter in the keepalive.php file. Recommendations: For SuperWebMailer version 9.00.0.01710, consider restricting access to the...

PT-2023-14159 · WordPress · Cyr To Lat Plugin

Name of the Vulnerable Software and Affected Versions: Cyr to Lat plugin for WordPress versions up to, and including, 3.5 Cyr to Lat plugin for WordPress version 3.6 Description: The Cyr to Lat plugin for WordPress is vulnerable to authenticated SQL Injection via the ctl sanitize title function d...

PT-2023-12753 · WordPress · Imagemagick Engine

Name of the Vulnerable Software and Affected Versions: ImageMagick Engine plugin for WordPress versions up to, and including 1.7.5 Description: The issue allows for remote code execution via the cli path parameter. This enables unauthenticated users to run arbitrary commands, potentially leading ...

PT-2023-20277 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu version 2.5.1 Description: There exists an SSRF Server-Side Request Forgery vulnerability located at the "/sandbox/proxyGateway" endpoint. This vulnerability allows manipulation of arbitrary requests and retrieval of correspondi...

PT-2023-29938 · Roundcube · Roundcube

Name of the Vulnerable Software and Affected Versions: Roundcube versions 1.4.x through 1.4.14 Roundcube versions 1.5.x through 1.5.4 Roundcube versions 1.6.x through 1.6.3 Description: The issue allows for XSS via a text/html e-mail message containing an SVG image with a USE element. This is...

PT-2023-31205 · WordPress · Bear

Name of the Vulnerable Software and Affected Versions: The BEAR for WordPress versions up to, and including, 1.1.3.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe bulkoperations swap function. This allows unauthenticated...

PT-2023-14066 · Tinylab · Tinylab Linux-Lab +1

Name of the Vulnerable Software and Affected Versions: TinyLab linux-lab version 1.1-rc1 TinyLab cloud-lab version 0.8-rc2 Description: The default configuration of TinyLab linux-lab and cloud-lab could cause Container Escape due to insecure permissions. Recommendations: For TinyLab linux-lab...

PT-2023-6365 · Oracle · Oracle Graalvm +1

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.8 through 21 Oracle GraalVM Enterprise Edition versions 20.3.11 through 22.3.3 Description: The issue is related to insufficient input validation in the Compiler component of Oracle GraalVM for JDK and...

PT-2023-6192 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.20 Oracle Database Server versions 21.3 through 21.11 Description: The vulnerability in the PL/SQL component of Oracle Database Server is related to insufficient input validation. Exploitation o...

PT-2025-23031 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 137.0.7151.55 Description: The issue is related to an inappropriate implementation in the Tab Strip of Google Chrome, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The severity of...

PT-2023-6299 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0 through 7.0.0.0.0 Description: The issue is related to insufficient input validation in the Pod Admin component. It allows a low-privileged attacker with network access via HT...

PT-2023-28084 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.8 Apache Traffic Server versions 9.0.0 through 9.2.2 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. It affects Apache Traffic Server,...