PT-2023-22339 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop jmsthemelayout version 2.5.5 Description: The issue is related to SQL Injection. It can be exploited via the "ajax jmsvermegamenu.php" file. Recommendations: For PrestaShop jmsthemelayout version 2.5.5, consider restricting access ...

PT-2023-22377 · Unknown · Bt21 X Bts Wallpaper

Name of the Vulnerable Software and Affected Versions: BT21 x BTS Wallpaper app version 12 for Android Description: The issue allows unauthorized applications to request permission to insert data into the database that records user personal preferences. This data is loaded into memory when the...

PT-2023-4221 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 versions 4.0-V16.03.34.06 Description: The issue is related to a buffer overflow in the formSetFirewallCfg function of the Tenda AC8 router's firmware, allowing a remote attacker to execute arbitrary code. The vulnerability can be...

PT-2023-22807 · Code Projects · Agro-School Management System

Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: A critical issue affects the Attachment Image Handler component, specifically the file btn functions.php, leading to unrestricted upload. The attack can be initiated remotel...

PT-2023-22396 · Unknown · The Thaiger

Name of the Vulnerable Software and Affected Versions: The Thaiger version 1.2 Description: An issue in The Thaiger for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files. Recommendations: For The Thaiger version 1.2, consider restricting...

PT-2023-10826 · Sea75300 · Fanpress Cm

Name of the Vulnerable Software and Affected Versions: sea75300 FanPress CM versions up to 3.6.3 Description: A vulnerability was found in the Template Preview component, specifically affecting the getArticlesPreview function of the file inc/controller/action/system/templatepreview.php. This issu...

PT-2023-24379 · Unknown +1 · Erofs-Utils +1

Name of the Vulnerable Software and Affected Versions: erofs-utils version 1.6 Description: The issue is related to a Heap Buffer Overflow in the erofsfsck dirent iter function in fsck/main.c. This allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

PT-2023-22375 · Google · Android

Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app for Android versions 7.0 through 8.0 Description: The issue allows unauthorized applications to inject data into the database that stores user personal preferences, which can be loaded into memory and used when t...

PT-2023-24413 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered in the DelvsList interface at the "/goform/aspForm" API endpoint. This issue can be exploited, potentially allowing unauthorized access or control...

PT-2023-24359 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R versions V9.1.0u.6118 B20201102 through V9.1.0u.6369 B20230113 Description: The issue concerns a command insertion vulnerability in the setOpModeCfg function. This vulnerability allows an attacker to execute arbitrary commands...

PT-2023-24455 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: mp4v2 version 2.1.3 Description: A memory leak was discovered in mp4v2 via the MP4File::ReadString function at mp4file io.cpp. Recommendations: For mp4v2 version 2.1.3, consider restricting access to the MP4File::ReadString function until a...

PT-2023-24428 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered in the AddMacList interface at the "/goform/aspForm" API endpoint. This issue can be exploited due to insufficient validation of input data...

PT-2023-24463 · Unknown · Dcat-Admin

Name of the Vulnerable Software and Affected Versions: Dcat-Admin version 2.1.3-beta Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter. This enables attackers to potentially manipula...

PT-2023-24418 · H3C · H3C Magic R300

Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the ipqos lanip dellist interface at the "/goform/aspForm" API endpoint. Recommendations: For H3C Magic R300 version R300-2100MV100R004, as a...

PT-2023-24195 · Xibo · Xibo

Name of the Vulnerable Software and Affected Versions: Xibo versions 3.2.0 through 3.3.4 Description: A SQL injection issue was discovered in the nameFilter function, allowing an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical...

PT-2023-24435 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A memory leak issue exists in the file message.c, which could be exploited by an attacker to cause a denial of service attack by consuming all available memory resources. Recommendations: For NanoMQ version...

PT-2023-3739 · Advantech · Advantech Webaccess

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess version 8.4.5 Description: The issue is related to insufficient authentication data validation in the software. An attacker could exploit this by tricking an authenticated user into loading a maliciously crafted .zip file,...

PT-2023-18801 · WordPress · Loginizer

Name of the Vulnerable Software and Affected Versions: Loginizer WordPress plugin versions prior to 1.7.9 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly escaped before being outputted back in the page. This could be...

PT-2023-16514 · WordPress · Newsletter Popup

Name of the Vulnerable Software and Affected Versions: The Newsletter Popup WordPress plugin versions 1.2 and earlier Description: The issue concerns a lack of CSRF checks in certain areas of the plugin, which could allow attackers to perform unwanted actions on behalf of logged-in users through...

PT-2023-22421 · Abstrium · Abstrium Pydio Cells

Name of the Vulnerable Software and Affected Versions: Abstrium Pydio Cells version 4.2.0 Description: A critical vulnerability was found in the User Creation Handler component, leading to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 4.2.1 i...