PT-2023-4903 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.1 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.6 Description: The issue is caused by a heap overflow in the dynamic memor...

PT-2023-6913 · Ibm · Ibm Txseries For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms versions 8.1 through 9.1 Description: The issue is related to a denial of service caused by improper enforcement of the timeout on individual read operations. A remote attacker could exploit this by conducting...

PT-2023-22283 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified Description: The issue concerns the exposure of sensitive information to unauthorized actors in the BIOS firmware of some IntelR NUC devices. This could potentially allow a privileged user to enable...

PT-2023-32984 · Moq · Moq

Name of the Vulnerable Software and Affected Versions: Moq versions 4.20.0-rc through 4.20.1 Description: The issue concerns the inclusion of SponsorLink in certain versions of Moq, which runs an obfuscated DLL at build time. This DLL scans local git config data and shares the user's hashed email...

PT-2023-28577 · WordPress · Absolute Privacy

Name of the Vulnerable Software and Affected Versions: Absolute Privacy plugin for WordPress versions up to, and including, 2.1 Description: The issue is due to missing nonce validation on the abpr profileShortcode function, making it possible for unauthenticated attackers to change user email an...

PT-2023-25528 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-enum-o bf include timezone parameter of index.php. This allows for potential malicious script execution. Recommendations: For PHPJabber...

PT-2023-14210 · Intel · Intel(R) Rst

Name of the Vulnerable Software and Affected Versions: IntelR RST software versions prior to 16.8.5.1014.5 IntelR RST software versions prior to 17.11.3.1010.2 IntelR RST software versions prior to 18.7.6.1011.2 IntelR RST software versions prior to 19.5.2.1049.5 Description: The issue is related...

PT-2023-27102 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: A File Upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For PHPJabbers Ticket Support Script version 3.2, consider disabling file...

PT-2023-4548 · Node.Js +10 · Node.Js +10

Name of the Vulnerable Software and Affected Versions: Node.js versions 16.x through 20.x Description: The issue is related to the use of module.constructor.createRequire, which can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This...

PT-2023-33013 · Opentelemetry · @Opentelemetry/Instrumentation

Name of the Vulnerable Software and Affected Versions: @opentelemetry/instrumentation versions prior to 0.41.2 Description: The issue allows for remote code execution when user-supplied input is passed directly to an import function. This is due to the import-in-the-middle loader generating a...

PT-2023-26072 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the Search Report Page of the Admin portal. This type of vulnerability allows attackers to inject malicious scripts...

PT-2023-26071 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the Search Report Details of the Admin portal. This type of vulnerability allows attackers to inject malicious scrip...

Intel® VCUST Tool Advisory

Summary: A potential security vulnerability in some Intel® VCUST Tool software may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-25944 Description: Uncontrolled search path element in some Intel...

2023.3 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates and an optional software sequence to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-40982 Description: Information exposure...

PT-2023-26597 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.0.0 Description: The issue allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the "/QueryView.php" API endpoint. Recommendations: For ChurchCRM version 5.0.0,...

PT-2023-26074 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the View Request of Nurse Page within the Admin portal. Recommendations: For Online Nurse Hiring System version 1.0,...

PT-2023-4560 · Adobe · Acrobat Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Adobe Acrobat Document Cloud Adobe Acrobat Reader Document Cloud Description: A...

PT-2023-28332 · WordPress · Full - Customer

Name of the Vulnerable Software and Affected Versions: The FULL - Customer plugin for WordPress versions up to, and including, 2.2.3 Description: The issue allows authenticated attackers with subscriber-level permissions and above to obtain sensitive information about the site configuration as...

PT-2023-4519 · Phoenix Contact · Phoenix Contact Wp 6Xxx

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT WP 6xxx versions prior to 4.0.10 Description: The issue exists due to the lack of measures to neutralize special elements in the software of PHOENIX CONTACT WP 6xxx web panels, which are used for management and monitoring in...

Radeon™ Software Crimson ReLive Edition

Bulletin ID: AMD-SB-6007 Potential Impact: Escalation of Privilege Severity: High Summary Radeon™ Software Crimson ReLive Edition is an advanced graphics software designed for enabling high-performance gaming and engaging VR experiences. A potential vulnerability was reported in Radeon™ Software...