Honeywell Experion PKS, LX and PlantCruise Deserialization of Untrusted Data (CVE-2023-25770)

Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

PT-2023-22933 · Google · Android 11 +3

Name of the Vulnerable Software and Affected Versions: Camera versions prior to 11.0.16.43 in Android 11 Camera versions 12.0.07.53 through 12.1.03.10 in Android 12 Camera versions 13.0.01.43 through 13.1.00.83 in Android 13 Description: The issue allows a local attacker to access specific files...

PT-2023-27210 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper affected versions not specified Description: The Vyper compiler evaluates arguments from right to left instead of left to right for certain expressions, including unsafe add, unsafe sub, unsafe mul, unsafe div, pow mod256, |, &, ^ bitwi...

PT-2025-10401 · Mariadb +1 · Mariadb Server +1

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.4 through 10.4.32 MariaDB Server versions 10.5 through 10.5.23 MariaDB Server versions 10.6 through 10.6.16 MariaDB Server versions 10.7 through 10.11.6 MariaDB Server versions 11.0 through 11.0.4 MariaDB Server...

PT-2023-26897 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to Multiple Reflected XSS CWE-79. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2023-21534 · Dell · Dell Alienware Command Center

Name of the Vulnerable Software and Affected Versions: Dell Alienware Command Center versions prior to 5.5.51.0 Description: The issue is related to a deserialization of untrusted data vulnerability. A local malicious user could potentially send specially crafted requests to the .NET Remoting...

PT-2023-4810 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.10 XWiki Platform versions prior to 15.4 RC1 Description: The issue is related to errors in authorization, allowing a remote attacker to execute arbitrary web scripts with elevated privileges. In XWiki, ...

PT-2023-25536 · Relic · Relic

Name of the Vulnerable Software and Affected Versions: RELIC versions before commit 34580d840469361ba9b5f001361cad659687b9ab Description: The issue allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling the realloc function in the bn grow...

PT-2023-26132 · General Solutions Steiner Gmbh · Case 3 Taskmanagement

Name of the Vulnerable Software and Affected Versions: General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.message parameter...

PT-2023-30069 · Instantsoft · Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and executed b...

PT-2023-5229 · Schweitzer Engineering Laboratories · Acselerator Bay Screen Builder

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software versions prior to 1.0.49152.778 Description: The issue is related to an improper limitation of a pathname to a restricted directory, allowing relative path...

PT-2023-5313 · Eclipse · Eclipse Leshan

Name of the Vulnerable Software and Affected Versions: Eclipse Leshan versions prior to 1.5.0 Eclipse Leshan versions prior to 2.0.0-M13 Description: The issue is related to the incorrect restriction of XML links to external objects, which can allow a remote attacker to perform an XXE attack. Thi...

PT-2023-28014 · Grupposcai · Grupposcai Realgimm

Name of the Vulnerable Software and Affected Versions: GruppoSCAI RealGimm version 1.1.37p38 Description: A XML External Entity XXE vulnerability in the VerifichePeriodiche.aspx component allows attackers to read any file in the filesystem via supplying a crafted XML file. Recommendations: For...

Citrix Profile Management user configuration for Microsoft Edge

Microsoft announced retirement of Internet Explorer in Summer 2022, MS Edge was deployed to Citrix XenApp servers with published desktops. When users log off and log on again the MS Edge presents "Out of box" dialog prompts. MS Edge favorites, homepage, history, etc.are not preserved. This articl...

PT-2023-18340 · WordPress · Badgeos

Name of the Vulnerable Software and Affected Versions: BadgeOS plugin for WordPress versions up to, and including, 3.7.1.6 Description: The issue is due to improper validation and authorization checks within the badgeos update steps ajax handler, badgeos update award steps ajax handler, badgeos...

PT-2023-27671 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 Description: The issue concerns a buffer overflow that occurs via the function sub 34FD0. This function reads user-provided parameters and passes variables without performing any length checks, leading to the overflow...

PT-2023-27964

Name of the Vulnerable Software and Affected Versions phpjabbers Business Directory Script version 3.2 Description The issue concerns Cross Site Scripting XSS via the keyword parameter. This allows for potential malicious script injection. No information is provided about the estimated number of...

PT-2023-33035 · Unknown · Apollo Server

Name of the Vulnerable Software and Affected Versions: Apollo Server versions prior to the latest version Description: The issue concerns Apollo Server logging sensitive information, specifically Studio API keys, under certain conditions. This occurs when API keys are passed with leading or...

PT-2023-24288 · WordPress · Woocommerce Returns/Warranty Requests

Name of the Vulnerable Software and Affected Versions: WooCommerce Returns and Warranty Requests plugin versions = 2.1.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-4650 · Mongodb +2 · Mongodb Node.Js Driver +5

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions 1.0.0 through 1.17.7 MongoDB PHP Driver versions 1.0.0 through 1.9.2 MongoDB Swift Driver versions 1.0.0 through 1.1.1 MongoDB Node.js Driver 3.6 versions 3.6 through 3.6.10 MongoDB Node.js Driver 4.0 versions 4.0...