PT-2023-14177 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.0.1 Description: The issue allows SQL injection via ArchivesMapper.xml. Recommendations: For Dreamer CMS version 4.0.1, consider restricting access to ArchivesMapper.xml to minimize the risk of exploitation. As a tempora...

PT-2023-17689 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaint Management System version 1.0 Description: A critical issue affects the processing of the file /admin/userprofile.php, specifically the component GET Parameter Handler. The manipulation of the uid argument leads to SQ...

PT-2023-17778 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Vehicle Service Management System. This issue affects an unknown part of the file /classes/Users.php. T...

PT-2023-17435 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue affects the processing of the file "/author/list?limit=10&offset=0&order=desc". The manipulation of the sort argument leads to SQL injection. This issue can be exploited remotely...

PT-2023-21281 · T Me Studios · T-Me Studios Change Color Of Keypad

Name of the Vulnerable Software and Affected Versions: T-ME Studios Change Color of Keypad version 1.275.1.277 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the dex file in the internal storage. This enables the attacker to potentially access and...

PT-2023-17292

Name of the Vulnerable Software and Affected Versions Eskom Water Metering Software versions prior to 23.04.06 Description The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection. This is due to the improper neutralization of special...

PT-2023-22328 · Bloofox · Bloofox

Name of the Vulnerable Software and Affected Versions: bloofox version 0.5.2 Description: The issue is related to a SQL injection vulnerability. It affects the component "/index.php?mode=content&page=pages&action=edit&eid=1". Recommendations: For bloofox version 0.5.2, consider restricting access...

PT-2023-2584 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A problematic vulnerability has been found in the Web Management Interface of Netgear SRX5308. The issue is related to insufficient protection of the web page structure when handling the...

PT-2023-2756 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.2.13 Description: The issue is related to the qfq change class function in the Linux kernel, which allows an out-of-bounds write because lmax can exceed QFQ MIN LMAX. This can potentially impact the...

PT-2023-9518 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue is related to the IO default xsputn component and involves improper neutralization of special elements used in SQL commands. This can be exploited by a remote attacker to cause...

PT-2023-9519 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue in the libc longjmp component of the openlink virtuoso-opensource platform is related to the improper neutralization of special elements used in SQL commands. Exploitation of...

PT-2023-9514 · Openlink +4 · Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: Virtuoso-opensource version 7.2.9 Description: The issue is related to the libc malloc component of the Virtuoso-opensource platform, which is associated with the incorrect neutralization of special elements used in SQL commands. This can all...

PT-2023-22320 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A segmentation violation was discovered in yasm via the component yasm expr create at /libyasm/expr.c. Recommendations: For yasm version 1.3.0.55.g101bc, consider restricting access to the yasm expr...

PT-2023-9401 · Siemens · Siplus S7-1200 Cp 1243-1 +20

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1242-7 V2 versions prior to V3.4.29 SIMATIC CP 1243-1 versions prior to V3.4.29 SIMATIC CP 1243-1 DNP3 versions prior to V3.4.29 SIMATIC CP 1243-1 IEC versions prior to V3.4.29 SIMATIC CP 1243-7 LTE EU versions prior to V3.4.29...

PT-2023-6440 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat Reader versions 20.005.30441 and earlier Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of...

PT-2023-20820 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.7 Description: A Cross-Site Request Forgery CSRF issue allows attackers to force users into submitting web requests via unspecified vectors. Recommendations: For OpenCATS version 0.9.7, consider implementing anti-CSRF...

PT-2023-20462

Name of the Vulnerable Software and Affected Versions Lexmark devices through 2023-02-19 Description The issue is related to mishandling Input Validation. A proof of concept PoC has been published for a critical vulnerability in Lexmark printers, which allows for privilege escalation. There have...

PT-2023-9521 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue is related to the mp box deserialize string function, which is vulnerable due to improper neutralization of special elements used in SQL commands. This can be exploited by a...

PT-2023-21469 · Apache · Apache Linkis

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions 1.3.1 and earlier Description: The issue arises due to the default token generated by Linkis Gateway deployment being too simple, making it easy for attackers to obtain the default token for the attack. Generation rules...

PT-2023-21284 · Apus · Apus Group Launcher

Name of the Vulnerable Software and Affected Versions: APUS Group Launcher versions 3.10.73 through 3.10.88 Description: An issue in the APUS Group Launcher allows a remote attacker to execute arbitrary code via the FONT FILE parameter. Recommendations: For versions 3.10.73 and 3.10.88, consider...