PT-2023-21020 · Unknown · Lavalite Cms

Name of the Vulnerable Software and Affected Versions: LavaLite CMS version 9.0.0 Description: The issue is related to a host header injection attack. This type of attack involves manipulating the host header in HTTP requests to potentially bypass security controls or access unauthorized resource...

PT-2023-23515 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 1a2c047 Description: An Assertion Failure was discovered in Jerryscript via the component parser parse class at jerry-core/parser/js/js-parser-expr.c. Recommendations: For Jerryscript version 3.0 commit 1a2c047,...

PT-2023-20755 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue was found in the file view product.php, where the manipulation of the id argument leads to sql injection. This can be initiated remotely. Recommendation...

PT-2023-23377 · Motorola · Motorola Cx2L Router

Name of the Vulnerable Software and Affected Versions: Motorola CX2L Router version 1.0.1 Description: A command injection issue was discovered, which can be exploited via the tomography ping number parameter. Recommendations: For Motorola CX2L Router version 1.0.1, consider restricting access to...

PT-2023-20735 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A problematic issue was found in the products.php file, where the manipulation of the search argument leads to cross-site scripting. This can be exploited remotely...

PT-2023-3021 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PnPSCADA affected versions not specified Description: The PnPSCADA system is affected by a critical unauthenticated error-based PostgreSQL Injection vulnerability. This security flaw is present within the "hitlogcsv.jsp" endpoint, allowing...

PT-2023-33056 · Ibexa · Ibexa

Name of the Vulnerable Software and Affected Versions: ibexa affected versions not specified Description: The issue concerns user settings, including preferred time zone and number of items per page, which could be accessed by anonymous users. This impacts only the anonymous users themselves and...

PT-2023-19553 · WordPress · I Thirteen Web Solution Full Width Banner Slider Wp

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution Full Width Banner Slider Wp plugin versions 1.1.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for reflected cross-site scripti...

PT-2023-6473 · Go +7 · Go +7

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.21.2 Go versions prior to 1.20.9 Description: The issue is related to the "//line" directive in the Go programming language, which can be exploited to bypass restrictions on "//go:cgo " directives. This allows blocked...

PT-2023-7394 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: Intel Trace Analyzer and Collector versions prior to 2021.8.0 Description: The issue is related to an out-of-bounds write in the Intel Trace Analyzer and Collector software. This could potentially allow an authenticated user to escalate their...

PT-2023-2723 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

PT-2023-22947 · Sap · Sapui5

Name of the Vulnerable Software and Affected Versions: SAPUI5 versions SAP UI 750, SAP UI 754, SAP UI 755, SAP UI 756, SAP UI 757, UI 700 200 Description: The issue arises from improper neutralization of input in SAPUI5, allowing the injection of untrusted CSS through the sap.m.FormattedText SAPU...

PT-2023-23621 · Sap · S4Core +1

Name of the Vulnerable Software and Affected Versions: SAP APPL versions 500 through 618 S4CORE version 100 Description: The Vendor Master Hierarchy does not perform necessary authorization checks for an authenticated user to access some of its functions. This could lead to modification of data...

PT-2023-22529 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: Libming swftophp version 0.4.8 Description: A Buffer Overflow issue allows a local attacker to cause a denial of service via the newVar N function in util/decompile.c. This issue can be exploited to disrupt service. Recommendations: For Libmi...

PT-2023-23554

Name of the Vulnerable Software and Affected Versions Sngrep version 1.6.0 Description A heap buffer overflow issue was discovered in the function capture packet reasm ip at /src/capture.c. This issue affects the specified version of Sngrep. Recommendations For Sngrep version 1.6.0, consider...

PT-2023-5346 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: Libtiff version 4.0.7 Description: A Buffer Overflow issue in the tiffcp function of Libtiff allows a local attacker to cause a denial of service. The vulnerability is related to a buffer overflow in memory, which can be exploited to disrupt...

PT-2023-6953

Name of the Vulnerable Software and Affected Versions distribution versions prior to 2.8.2-beta.1 Description A flaw was found in the /v2/ catalog endpoint, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to...

PT-2023-17387 · WordPress · Web Stories For Wordpress

Name of the Vulnerable Software and Affected Versions: Web Stories for WordPress versions prior to 1.32 Description: The Web Stories for WordPress plugin has a vulnerability that allows users with the "Author" role to bypass permission checks and access password-protected content. Normally, users...

Hide My WP Ghost – Security < 5.0.20 - IP Address Spoofing

The plugin does not adequately restrict where IP Address information is retrieved from, leading to an IP Address Spoofing vulnerabilities. Attackers may use this to bypass IP blocking features provided by the plugin...

PT-2023-22513 · Imgproxy · Imgproxy

Name of the Vulnerable Software and Affected Versions: imgproxy versions 3.14.0 and earlier imgproxy prior to version 3.15.0 Description: The issue is related to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. This allows for potential exploitation...