PT-2023-15586 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was found via the username parameter in the setting/setOpenVpnCertGenerationCfg function. This allows for potential command injection attacks. Recommendation...

PT-2023-15479 · Popojicms · Popojicms

Name of the Vulnerable Software and Affected Versions: PopojiCMS version 2.0.1 Description: The issue concerns a file upload vulnerability in the backend plugin function. Recommendations: For PopojiCMS version 2.0.1, consider disabling the file upload functionality in the backend plugin as a...

PT-2023-10247 · Danynab · Movify-J

Name of the Vulnerable Software and Affected Versions: danynab movify-j affected versions not specified Description: A critical vulnerability was found in danynab movify-j, affecting the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument...

PT-2023-12418 · Ibm · Zosmf

Name of the Vulnerable Software and Affected Versions: zOSMF versions 1.16 through 1.19 Description: It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without a valid JWT token as any user. This issue occurs when zOSMF doesn’t have the APAR PH1214...

PT-2023-13982 · Unknown · Blogengine.Net

Name of the Vulnerable Software and Affected Versions: BlogEngine.NET version 3.3.8.0 Description: The issue allows an attacker to create any folder with a files prefix under the /App Data/ directory. Recommendations: For BlogEngine.NET version 3.3.8.0, consider restricting access to the /App Dat...

PT-2023-34201 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a memory leak in the socfpga gate init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-13785 · L Soft · Listserv 17

Name of the Vulnerable Software and Affected Versions: LISTSERV 17 Description: The LISTSERV 17 web interface is affected by an issue that allows remote attackers to conduct Insecure Direct Object References IDOR attacks. This is achieved via a modified email address in a "wa.exe" URL, resulting ...

PT-2023-18412 · Pix-Rt100 · Pix-Rt100

Name of the Vulnerable Software and Affected Versions: PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 and RT100 TEQ 2.1.2 EQ101 Description: The issue allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command. This is an OS command injection vulnerability...

PT-2023-10621 · Git +2 · Parontalli

Name of the Vulnerable Software and Affected Versions: ollpu parontalli affected versions not specified Description: A critical issue has been found, affecting an unknown function of the file httpdocs/index.php. The manipulation of the s argument leads to sql injection. Recommendations: Apply a...

PT-2023-33217 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns an out of bounds access in the sja1105 init l2 policing function. This problem was introduced in version v5.14 and is fixed in Linux Kernel version v5.15.83. The actual...

PT-2023-33152 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a NULL pointer dereference in the nilfs palloc commit free entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-10229 · Unknown · Brandonfire Mirna Database By Php Mysql

Name of the Vulnerable Software and Affected Versions: brandonfire miRNA Database by PHP MySql affected versions not specified Description: A critical vulnerability has been found in the software, affecting the construct/select single rna/count rna function of the file inc/model.php. This...

UBUNTU-CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

PT-2023-15116 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/ajax.php?action=save queue" API endpoint...

PT-2023-15568 · Unknown · Tramyardg Hotel-Mgmt-System

Name of the Vulnerable Software and Affected Versions: Tramyardg hotel-mgmt-system version 2022.4 Description: The issue concerns SQL Injection, which can be exploited via the /app/dao/CustomerDAO.php endpoint. This allows for potential unauthorized access or manipulation of data. No information ...

PT-2023-15654 · Unknown · Eternal Terminal

Name of the Vulnerable Software and Affected Versions: Eternal Terminal version 6.2.1 Description: The issue concerns world-readable logfiles in etserver and etclient. Recommendations: For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent...

PT-2023-10620 · Unknown · Ton-Masterserver

Name of the Vulnerable Software and Affected Versions: GGGGGGGG ToN-MasterServer affected versions not specified Description: A critical issue has been found in GGGGGGGG ToN-MasterServer, affecting some unknown functionality of the file public html/irc updater/svr request pub.php. The manipulatio...

PT-2023-1503 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.4 through 7.5 Description: The issue is related to the disclosure of information in the IBM QRadar SIEM system. It allows an attacker to expose protected information. The problem arises from the copying of certifica...

PT-2023-15569 · Unknown · Tramyardg Hotel-Mgmt-System

Name of the Vulnerable Software and Affected Versions: Tramyardg hotel-mgmt-system version 2022.4 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the process update profile.php file. Recommendations: For Tramyardg hotel-mgmt-system version 2022.4,...

PT-2023-14969 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0.0 Description: The Judging Management System contains a SQL injection issue via the username parameter. This allows for potential exploitation. Recommendations: For Judging Management System version 1.0.0...