PT-2023-22534 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: The issue concerns SQL Injection via the QTY parameter. This allows for potential manipulation of database queries, which could lead to unauthorized access or data...

PT-2023-8236 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 114.0.5735.90 Description: The issue is related to insufficient policy enforcement in the Android Debug Bridge ADB component of Google Chrome on ChromeOS. This allows a local attacker with physical...

PT-2023-11615 · Beescms · Beescms

Name of the Vulnerable Software and Affected Versions: beescms version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to delete the administrator account via a crafted request to "/admin/admin admin.php". This can be exploited by sending a malicious request to the specifi...

PT-2023-23122 · Unknown · Opc Ua .Net Standard Reference Server

Name of the Vulnerable Software and Affected Versions: OPC UA .NET Standard Reference Server versions prior to 1.4.371.86 Description: The issue allows remote attackers to send malicious requests that expose sensitive information by placing it into an error message. This error message may be seen...

PT-2023-23176 · Mage Ai · Mage Ai

Name of the Vulnerable Software and Affected Versions: mage-ai versions 0.8.34 through 0.8.71 Description: The issue affects mage-ai, an open-source data pipeline tool, when used with user authentication enabled. It allows the terminal to be accessed by users who are not signed in or do not have...

PT-2023-7443 · Canon · C1127P +17

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY versions prior to firmware Ver.11.04 Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier Color imageCLASS LBP660C...

PT-2023-15508 · Jedox · Jedox

Name of the Vulnerable Software and Affected Versions: Jedox versions 2020.2.5 Description: The issue allows remote authenticated users to create jobs that can execute arbitrary code via Groovy scripts. This is related to the integrator component in the affected software. Recommendations: For...

PT-2023-22351 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 3.1.2 Description: The issue is a Cross Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via the Post function. This enables attackers to potentially inject malicious scripts into the websit...

PT-2023-2597 · D Link · D-Link Dir-879

Name of the Vulnerable Software and Affected Versions: D-Link DIR-879 version v105A1 Description: The issue is related to a component called phpcgi in the D-Link DIR-879 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to bypass...

PT-2023-14756 · Apache · Apache Streampark

Name of the Vulnerable Software and Affected Versions: Apache StreamPark versions prior to 2.0.0 Description: The issue allows any user to upload a jar as an application without mandatory verification of the uploaded file type. This enables users to upload high-risk files and potentially upload...

PT-2023-8053 · Eurotel · Eurotel Etl3100

Name of the Vulnerable Software and Affected Versions: EuroTel ETL3100 versions v01c01 and v01x37 Description: The issue is related to the lack of limitations on authentication attempts, which can be exploited by a remote attacker to gain full access to the system through brute-force guessing of...

PT-2023-19457 · Ks Soft · Advanced Host Monitor

Name of the Vulnerable Software and Affected Versions: ks-soft Advanced Host Monitor versions up to 12.56 Description: A vulnerability was found in the software, classified as problematic, affecting some unknown functionality of the file C:Program Files x86HostMonitorRMA-Winrma active.exe. The...

PT-2023-19174

Name of the Vulnerable Software and Affected Versions Ubiquiti EdgeRouter X versions up to 2.0.9-hotfix.6 Description A critical issue affects the Web Management Interface component, where the manipulation of the src argument leads to command injection. This can be initiated remotely...

PT-2023-22546 · Wuzhicms · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: wuzhicms version 4.1.0 Description: The issue is related to Cross Site Scripting XSS in the Member Center, Account Settings. Recommendations: For wuzhicms version 4.1.0, as a temporary workaround, consider restricting access to the Member...

PT-2023-18984 · Unknown · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Service Provider Management System. The issue is related to an unknown function of the file /admin/index.php, wher...

PT-2023-20558

Name of the Vulnerable Software and Affected Versions Hyundai Gen5W L in-vehicle infotainment system version AE E PE EUR.S5W L001.001.211214 Description An issue was discovered in the Hyundai Gen5W L in-vehicle infotainment system. The decryption binary used to decrypt firmware files has an...

PT-2023-18959 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /classes/Master.php?f=delete inquiry. This issue leads to improper...

PT-2023-18669 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: Silverstripe Framework versions prior to 4.12.15 Description: The GridField print view incorrectly validates the permission of DataObjects, potentially allowing a content author to view records they are not authorized to access...

PT-2023-20854 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. The vendor states that this is an expected abort on out-of-memory error. Recommendation...

PT-2023-32966 · Avideo · Avideo

Name of the Vulnerable Software and Affected Versions: AVideo affected versions not specified Description: The issue is related to a parameter success that does not properly sanitize symbol characters, leading to a potential XSS attack. This could allow an attacker to take over an admin's account...