PT-2023-9835 · Apache · Apache Spark +1

Name of the Vulnerable Software and Affected Versions: Apache Hive versions 1.2.0 and later Apache Spark versions 2.0.0 and later Description: The issue is related to the exposure of digital signatures in cookie data, which can lead to security vulnerabilities and exploitation. The vulnerable...

PT-2023-6204 · Oracle +11 · Mysql Server +10

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.43 and prior MySQL Server versions 8.0.34 and prior MySQL Server version 8.1.0 Description: The vulnerability in the MySQL Server product, specifically in the InnoDB component, is related to insufficient input...

PT-2023-12035 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue allows a user to obtain sensitive information due to insufficient session expiration. Recommendations: For IBM Security Verify Privilege On-Premises version 11.5,...

PT-2023-9217 · Samsung · Samsung Magician

Name of the Vulnerable Software and Affected Versions: Samsung Magician version 8.0.0 Description: The issue is related to an Untrusted Search Path in the Samsung Magician program for managing SSD disks. This allows an attacker to tamper with the directory and DLL files used during the installati...

PT-2023-12691 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: IBM Security Verify Privilege On-Premises could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...

PT-2023-25753 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ versions V5.2cu.7594 B20200910 and before Description: The issue is related to command injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2023-29633 · Unknown · Engelsystem

Name of the Vulnerable Software and Affected Versions: Engelsystem affected versions not specified Description: Engelsystem is a shift planning system for chaos events. If a user's password is compromised and an attacker gains access to the user's account, the attacker's session is not terminated...

PT-2023-29634 · Nextcloud · Nextcloud Mail

Name of the Vulnerable Software and Affected Versions: Nextcloud Mail versions prior to 2.2.8 Nextcloud Mail versions prior to 3.3.0 Description: The issue is related to a missing check of origin, target, and cookies in Nextcloud Mail, allowing an attacker to abuse the proxy endpoint and cause a...

PT-2023-12694 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue could disclose sensitive information to an attacker due to the transmission of data in clear text. Recommendations: For IBM Security Verify Privilege On-Premises...

PT-2023-29678 · WordPress · Taggbox

Name of the Vulnerable Software and Affected Versions: Taggbox plugin versions = 2.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...

PT-2023-29630 · Pixelgrade · Pixfields

Name of the Vulnerable Software and Affected Versions: PixelGrade PixFields plugin versions prior to 0.7.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2023-25783 · WordPress · Activitypub

Name of the Vulnerable Software and Affected Versions: ActivityPub WordPress plugin versions prior to 1.0.0 Description: The issue allows any authenticated user to retrieve the content of arbitrary posts, including drafts and private posts, via an IDOR vector. This is because the plugin does not...

PT-2023-28911 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.4.0 through 1.8.0 Description: The issue affects Apache InLong, allowing an attacker to create misleading or false log records. This makes it harder to audit and trace malicious activities. The estimated number of...

PT-2023-29620 · WordPress · Anurag Deshmukh Cpt Shortcode Generator

Name of the Vulnerable Software and Affected Versions: Anurag Deshmukh CPT Shortcode Generator plugin versions 1.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-6317

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the web UI feature of Cisco IOS XE Software that could allow an authenticated, remote attacker to inject commands with root privileges. This is due to...

PT-2023-6596 · D Link · Di-7100Gv2.D1 +5

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2.D1 versions 23.08.25D1 and earlier D-Link DI-7100G+V2.D1 versions 23.08.23D1 and earlier D-Link DI-7100GV2.D1 version 23.08.23D1 D-Link DI-7200G+V2.D1 versions 23.08.23D1 and earlier D-Link DI-7200GV2.E1 versions 23.08.23E1...

PT-2023-24511 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue concerns hard-coded credentials, such as a password or cryptographic key, used by IBM Security Verify Governance for inbound authentication, outbound communication to external...

PT-2023-7009 · Ibm · Ibm Security Directory Server

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Server version 6.4.0 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory...

PT-2023-8837 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.0.1.2425 build 20230609 QTS versions prior to 5.1.0.2444 build 20230629 QTS versions prior to 4.5.4.2467 build 20230718 QuTS hero h versions prior to h5.0.1.2515 build 20230907 QuTS hero h versions prior to h5.1.0.2424...

PT-2023-29444 · 1E · 1E Platform Saas +1

Name of the Vulnerable Software and Affected Versions: 1E Platform versions 8.1.2 through 9.0.1 1E Platform SaaS versions prior to 23.7.1 Description: The issue is a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Application of the relevant hotfix remediates this...