PT-2023-27679 · Moosocial · Moosocial

Name of the Vulnerable Software and Affected Versions: mooSocial MooSocial Software version Demo Description: The issue allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. This is a Cross Site Request Forgery vulnerability. Recommendations: For...

PT-2023-28287 · Lenosp · Lenosp

Name of the Vulnerable Software and Affected Versions: lenosp versions 1.0 through 1.2.0 Description: The issue allows attackers to execute HTML code via a crafted JPG file. This is achieved through an arbitrary file upload vulnerability in the /user/upload component. Recommendations: For version...

PT-2023-9926 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment, there is no information about a newer...

PT-2023-11176 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment, there is no information about a newer...

PT-2023-9922 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-11082 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-10089 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-10046 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-11177 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-31233 · WordPress · Booster For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Booster for WooCommerce plugin for WordPress versions up to, and including, 7.1.0 Description: The issue is related to Stored Cross-Site Scripting via multiple shortcodes due to insufficient input sanitization and output escaping on...

PT-2023-5065 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Visual Studio Code, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...

PT-2023-29350 · Opentext · Enterprise Developer +3

Name of the Vulnerable Software and Affected Versions: OpenText Micro Focus Visual COBOL versions 7.0 patch updates 19 and 20 OpenText Micro Focus Visual COBOL versions 8.0 patch updates 8 and 9 OpenText Micro Focus Visual COBOL version 9.0 patch update 1 OpenText Micro Focus COBOL Server version...

PT-2023-23091 · Unknown · Gotham Cerberus

Name of the Vulnerable Software and Affected Versions: Gotham Cerberus versions prior to 100.230704.0-27-g031dd58 Description: The Gotham Cerberus service has a stored cross-site scripting XSS issue that could allow an attacker with access to Gotham to launch attacks against other users...

PT-2023-27713 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Doctor Appointment System version 1.0 Description: The issue concerns SQL Injection in the userid variable at the doctorsmyDetails.php endpoint. This allows for potential manipulation of database queries. Recommendations: For...

PT-2023-25148 · WordPress · Ftp Access

Name of the Vulnerable Software and Affected Versions: FTP Access WordPress plugin versions 1.0 and earlier Description: The issue concerns a lack of authorization and CSRF checks when updating settings in the plugin, along with missing sanitization and escaping. This allows any authenticated use...

PT-2023-11520 · D Link · Dlink 619L

Name of the Vulnerable Software and Affected Versions: DLINK 619L version B 2.06beta Description: A buffer overflow issue exists via the FILECODE parameter on login, which can be exploited. Recommendations: For DLINK 619L version B 2.06beta, avoid using the FILECODE parameter in the login process...

PT-2023-27544 · Sap · Sap Powerdesigner Client

Name of the Vulnerable Software and Affected Versions: SAP PowerDesigner Client version 16.7 Description: The issue allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an unsuspecting user, to have it executed by the application on behalf of the user. Th...

PT-2023-27547 · S4Core · S4Core

Name of the Vulnerable Software and Affected Versions: S4CORE Manage Purchase Contracts App versions 102 through 107 Description: The issue is related to the lack of necessary authorization checks for authenticated users, which could allow an attacker to perform unintended actions, resulting in...

PT-2023-27385 · Canonical +2 · Moodle

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No details are provided about the issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-27545 · Sap · Sap Business Objects Installer

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Suite Installer versions 420, 430 Description: The issue allows an attacker within the network to create a directory under a temporary directory and link it to a directory with operating system files. On successful...