PT-2023-17164 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: Xunrui CMS version 4.61 Description: A problematic issue was found in the software, affecting an unknown function of the file /config/myfield/test.php. This leads to information disclosure and can be exploited remotely. Recommendations: For...

PT-2023-21625 · Apple · Macos Ventura +1

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue allows an app to potentially read sensitive location information. Recommendations: For macOS...

PT-2023-2363 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability has been found in the ImfRegistryFilter.sys component of IObit Malware Fighter, related to incorrect clearing or release of resources. This affects the function...

PT-2023-17140 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability was found in the IOCTL Handler component of the library ObCallbackProcess.sys, affecting the function 0x222034/0x222038/0x22203C/0x222040. This leads to denial o...

PT-2023-17128 · Unknown · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: Jianming Antivirus version 16.2.2022.418 Description: A critical vulnerability has been found in the library kvcore.sys of the component IoControlCode Handler, affecting unknown code. The manipulation leads to memory corruption. Attacking...

PT-2023-17137 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS version 6.72 Description: A vulnerability was found in the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross-site scripting. The attack can be launched remotely. Recommendations: For OTCMS...

PT-2023-2024

Name of the Vulnerable Software and Affected Versions MLflow versions prior to 2.2.1 Description The issue is related to incorrect restriction of a directory path name with limited access. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information,...

PT-2023-8900 · Frrouting +8 · Frrouting +8

Name of the Vulnerable Software and Affected Versions: Frrouting bgpd version 8.4.2 Description: The issue is related to the bgp attr psid sub function in FRRouting, which can be exploited by a remote attacker to cause a denial of service. This is due to the lack of neutralization of special...

PT-2023-17839 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the append camera metadata function of camera metadata.c due to a missing bounds check. This could lead to local information disclosure, requiring System...

PT-2023-6548 · Jmsblog +1 · Jmsblog +1

Name of the Vulnerable Software and Affected Versions: PrestaShop jmsblog version 2.5.5 Description: The issue is related to a lack of protection for the SQL query structure in the Jms Blog module of the PrestaShop e-commerce web application. This can be exploited by a remote attacker to execute...

PT-2023-16718 · Unknown · Koc Energy Web Report System

Name of the Vulnerable Software and Affected Versions: As Koc Energy Web Report System versions prior to 23.03.10 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-2222 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches versions prior to 16.11.1 Description: A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker...

PT-2023-2191 · Cisco · Cisco Catalyst 9100 +2

Name of the Vulnerable Software and Affected Versions: Cisco Business 150 versions affected versions not specified Cisco Business 151 Mesh Extenders versions affected versions not specified Cisco Catalyst 9100 versions affected versions not specified Description: The issue is related to a buffer...

PT-2023-16579 · WordPress · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: WP Meta SEO WordPress plugin versions prior to 4.5.3 Description: The issue is related to a blind SQL Injection vulnerability. It occurs because the plugin does not properly sanitize and escape inputs into SQL queries. This can be exploited b...

PT-2023-17042 · Sourcecodester · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A vulnerability has been found in the Category Name Handler component, specifically in the file /ecommerce/admin/category/controller.php. The issue is related to the manipulation of th...

PT-2023-16990 · Unknown · Watchdog Anti-Virus

Name of the Vulnerable Software and Affected Versions: Watchdog Anti-Virus version 1.4.214.0 Description: A problematic vulnerability was found in Watchdog Anti-Virus, affecting the function in the library wsdk-driver.sys of the component IoControlCode Handler. This leads to denial of service. Th...

PT-2023-17013 · Sourcecodester · Sourcecodester Canteen Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System version 1.0 Description: A critical issue has been found in the SourceCodester Canteen Management System. This issue affects the function query of the file createuser.php. The manipulation of the...

PT-2023-16994 · Unknown · Watchdog Anti-Virus

Name of the Vulnerable Software and Affected Versions: Watchdog Anti-Virus version 1.4.214.0 Description: A critical issue has been found, affecting the function in the library wsdk-driver.sys of the component IoControlCode Handler, leading to improper access controls. The manipulation requires a...

PT-2023-21031 · Unknown · Online Book Store Project

Name of the Vulnerable Software and Affected Versions: Online Book Store Project version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/bookstore/bookPerPub.php" API endpoint. There is no information provided about the estimated number of potentially...

PT-2023-1772 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue exists due to insufficient input validation in the Procedure Call Runtime of Windows operating systems. This allows a remote attacker to execute arbitrary code. Recommendation...