PT-2023-6101 · Ipswitch · Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: WS FTP Server versions 8.7.0 through 8.7.3 WS FTP Server versions 8.8.0 through 8.8.1 Description: A reflected cross-site scripting XSS vulnerability exists in WS FTP Server's Ad Hoc Transfer module. This vulnerability can be leveraged by an...

PT-2023-5611

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.23.1 Description The issue is related to an out-of-bounds read within the xrdp executable due to unbounds-checked access to font glyphs in xrdp painter.c. This can result in an out-of-bounds read within a potentially...

PT-2023-31172

Name of the Vulnerable Software and Affected Versions Usta AYBS versions prior to 1.0.3 Description The issue is related to an Authorization Bypass Through User-Controlled Key, which allows for Authentication Abuse and Authentication Bypass. It also involves an Improper Neutralization of Special...

PT-2023-6228 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved on PTX10003 Series versions prior to 21.4R3-S4-EVO Juniper Networks Junos OS Evolved on PTX10003 Series version 22.1 versions prior to 22.1R3-S3-EVO Juniper Networks Junos OS Evolved on PTX10003 Series versio...

PT-2023-8804 · Hitachi Vantara · Hitachi Vantara Pentaho Business Analytics Server

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.5.0.0 Hitachi Vantara Pentaho Business Analytics Server versions prior to 9.3.0.4 Hitachi Vantara Pentaho Business Analytics Server version 8.3.x.x Description: The issue i...

PT-2023-27588 · Pdfcrowd · Pdfcrowd Save As Pdf Plugin

Name of the Vulnerable Software and Affected Versions: Pdfcrowd Save as PDF plugin versions = 2.16.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject malicious code into the applicatio...

PT-2023-27594 · Veronalabs · Veronalabs Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: VeronaLabs Slimstat Analytics plugin versions 5.0.8 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts in...

PT-2023-23087 · Apollo · Apollo

Name of the Vulnerable Software and Affected Versions: Apollo affected versions not specified Description: The issue allows comments added by users in Apollo change requests to contain a javascript URI link. When rendered, this link can result in a cross-site scripting XSS attack that requires us...

PT-2023-23864 · Hancom · Hancom Office 2020 Hword

Name of the Vulnerable Software and Affected Versions: Hancom Office 2020 HWord version 11.0.0.7520 Description: A use-after-free issue exists in the footerr functionality. This can be triggered by a specially crafted .doc file, potentially allowing an attacker to exploit the vulnerability by...

September 26, 2023—KB5030310 (OS Build 22621.2361) Preview

None None...

PT-2023-29149 · Imagination Technologies · Imagination Gpu

Name of the Vulnerable Software and Affected Versions: Imagination GPU devices versions 2018 and later Description: The issue allows for cross-origin pixel-stealing attacks against certain functions in the SVG Filter specification, such as feTurbulence and feBlend. This can enable attackers to...

PT-2023-28128 · Peprodev · Peprodev Cf7 Database Plugin

Name of the Vulnerable Software and Affected Versions: PeproDev CF7 Database plugin versions = 1.7.0 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can...

PT-2023-27747 · Juplink · Juplink Rx4-1500

Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 Description: The issue allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint "/webs/userpasswd.htm"...

ISC Releases Security Advisories for BIND 9

The Internet Systems Consortium ISC has released security advisories to address vulnerabilities affecting ISC’s Berkeley Internet Name Domain BIND 9. A malicious cyber actor could exploit these vulnerabilities to cause denial-of-service conditions. CISA encourages users and administrators to revi...

PT-2023-27759 · Unknown · Plone.Namedfile

Name of the Vulnerable Software and Affected Versions: plone.namedfile versions prior to 5.6.1 plone.namedfile versions prior to 6.0.3 plone.namedfile versions prior to 6.1.3 plone.namedfile versions prior to 6.2.1 Description: There is a stored cross site scripting vulnerability for SVG images. ...

PT-2023-7998 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.0.1.2376 build 20230421 QTS versions prior to 4.5.4.2374 build 20230416 QuTS hero versions prior to h5.0.1.2376 build 20230421 QuTS hero versions prior to h4.5.4.2374 build 20230417 QuTScloud versions prior to...

PT-2023-28889

Name of the Vulnerable Software and Affected Versions Pillar eve container versions 9.0.0 and later, prior to the inclusion of the config partition measurement in PCR13 Description The Pillar eve container checks for the existence and content of /config/GlobalConfig/global.json on boot. If the fi...

PT-2023-7547 · Qnap · Qts

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.2.6 build 20230621 QTS versions prior to 4.3.3.2420 build 20230621 QTS versions prior to 4.3.4.2451 build 20230621 QTS versions prior to 4.3.6.2441 build 20230621 Description: The issue is related to a buffer copy...

PT-2023-5652

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.6 macOS Monterey versions prior to 12.7 macOS Sonoma versions prior to 14 tvOS versions prior to 17 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 watchO...

PT-2023-28283 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: CloudExplorer Lite version 1.3.1 Description: An issue in CloudExplorer Lite allows an attacker to obtain sensitive information via the login key component. Recommendations: For CloudExplorer Lite version 1.3.1, consider disabling the login k...