PT-2023-12666 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-12835 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as its nature, potential impact, or affected devices. It appears to be a...

PT-2023-12862 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

PT-2023-12850 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate in a CNA pool not assigned to any issues during 2022,...

PT-2023-35685 · Git +1 · Croaring

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the crash type being a Heap-buffer-overflow WRITE 16. The...

PT-2023-19994 · Crmeb · Crmeb

Name of the Vulnerable Software and Affected Versions: CRMEB versions 1.3.4 and earlier Description: The issue is related to SQL Injection, which can be exploited via the "/api/admin/user/list" API endpoint. Recommendations: For CRMEB versions 1.3.4 and earlier, as a temporary workaround, conside...

Rittal CMC III Access systems

1. EXECUTIVE SUMMARY CVSS v3 4.8 Vendor: Rittal Equipment: CMC III Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to open control cabinets secured with Rittal locks. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Rittal...

PT-2023-15980 · WordPress · Wordpress Shortcodes

Name of the Vulnerable Software and Affected Versions: WordPress Shortcodes WordPress plugin versions 1.6.36 and earlier Description: The issue arises from the plugin's failure to validate and escape some of its shortcode attributes before outputting them back in a page or post where the shortcod...

PT-2023-16816 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2022.3.12 and below Description: The issue concerns improper access control in the secure messages feature, allowing an authenticated attacker with the message UUID to access the contained data. Recommendations: Fo...

PT-2023-20866 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to an arbitrary file upload vulnerability in the /admin1/config/update component, allowing attackers to execute arbitrary code via a crafted PHP file. Recommendations: For onekeyadmi...

PT-2023-2076 · Netup · Netup Iptv Combine

Name of the Vulnerable Software and Affected Versions: NetUP IPTV Combine affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the NetUP IPTV Combine administration web interface. This can be exploited by a remote attacker to bypass...

PT-2023-20760 · Zoho · Zoho Manageengine Supportcenter Plus +2

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions through 14104 Zoho ManageEngine Asset Explorer versions through 6987 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14000 Zoho ManageEngine Support Center Plus versions prior to 14000...

U.S. Dept Of Defense: Unauthenticated Blind SSRF at https://█████ via xmlrpc.php file

An unauthenticated blind SSRF vulnerability was discovered on the xmlrpc.php file at a certain endpoint, allowing an attacker to send requests to external URLs and potentially conduct further attacks. Input validation and filtering are recommended to prevent such attacks in the future...

Baicells Nova

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Baicells Equipment: Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 Vulnerability: Command injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow commands performed...

PT-2023-33009 · Vega · Vega

Name of the Vulnerable Software and Affected Versions: Vega versions prior to 4.5.1 Vega versions prior to 5.4.1 Description: The issue allows for arbitrary code execution when clicking href links. Recommendations: For versions prior to 4.5.1, update to version 4.5.1 to resolve the issue. For...

PT-2023-20666 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 2.3-milestone-1 through 13.10.10 XWiki Platform versions 14.4.6 and earlier XWiki Platform versions prior to 14.10 Description: The annotation displayer in XWiki Platform does not execute content in a restricted contex...

PT-2023-16780 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to...

PT-2023-20663 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.2-milestone-1 through 14.8 XWiki Platform versions 14.4 through 14.4.5 XWiki Platform versions 13.10 through 13.10.9 Description: XWiki Platform is a generic wiki platform where, starting in version 6.2-milestone-1,...

PT-2023-20678 · Vega · Vega

Name of the Vulnerable Software and Affected Versions: Vega versions prior to 5.23.0 Description: The lassoAppend function in Vega accepts 3 arguments and internally invokes the push function on the 1st argument, specifying an array consisting of the 2nd and 3rd arguments as the push call argumen...

PT-2023-19417 · Jensen Of Scandinavia · Jensen Of Scandinavia Eagle 1200Ac

Name of the Vulnerable Software and Affected Versions: Jensen of Scandinavia Eagle 1200AC version 15.03.06.33 en Description: A stack overflow issue was discovered via the wepkey4 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For version 15.03.06.33 en, as a temporary...