PT-2023-18532 · Unknown · Kubeoperator

Name of the Vulnerable Software and Affected Versions: KubeOperator versions 3.16.3 and below Description: The issue allows unauthorized access to API interfaces, potentially leaking sensitive information and allowing takeover of the cluster under certain conditions. This is due to a flaw in...

PT-2023-10332 · Forumhulp · Forumhulp

Name of the Vulnerable Software and Affected Versions: ForumHulp affected versions not specified Description: A critical issue was found in ForumHulp searchresults, affecting the list keywords function of the file event/listener.php. The manipulation of the word argument leads to SQL injection...

PT-2023-10207 · Unknown · Ss15-This-Is-Sparta

Name of the Vulnerable Software and Affected Versions: ss15-this-is-sparta affected versions not specified Description: A vulnerability has been found in the component Main Page, specifically affecting the file js/roomElement.js. The manipulation leads to cross site scripting. The attack can be...

PT-2023-16019 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing an attack...

PT-2023-10208 · Kelvinmo · Simplexrd

Name of the Vulnerable Software and Affected Versions: kelvinmo simplexrd versions up to 3.1.0 Description: A vulnerability was found in the file simplexrd/simplexrd.class.php, which leads to xml external entity reference. This issue affects unknown code and can be addressed by upgrading to versi...

PT-2023-10123 · Piwigo · Piwigo-Guest-Book

Name of the Vulnerable Software and Affected Versions: Piwigo-Guest-Book versions up to 1.3.0 Description: A critical issue affects the Navigation Bar component, specifically the include/guestbook.inc.php file. The manipulation of the start argument leads to sql injection. Recommendations: For...

PT-2023-10807 · Petermu · Nodebatis

Name of the Vulnerable Software and Affected Versions: PeterMu nodebatis versions up to 2.1.x Description: A critical issue has been found, affecting an unknown function, which leads to sql injection. Upgrading to version 2.2.0 can address this issue. Recommendations: For versions up to 2.1.x,...

Prototype Pollution

json5 is vulnerable to prototype pollution. The vulnerability exists in the internalize function in parse.js due to not restricting keys named proto which allows an attacker to inject specially crafted strings to pollute the prototype of the resulting object...

PT-2023-18509 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.14 on the stable branch Discourse versions prior to 3.0.0.beta16 on the beta and tests-passed branches Description: The issue exposes the number of times a user posted in an arbitrary topic to unauthorized user...

PT-2023-15891 · Snoyberg · Keter

Name of the Vulnerable Software and Affected Versions: snoyberg keter versions up to 1.8.1 Description: A vulnerability has been found in snoyberg keter, classified as problematic. This issue affects unknown code of the file Keter/Proxy.hs. The manipulation of the argument host leads to cross-sit...

PT-2023-11811 · Gturri · Xmlrpc

Name of the Vulnerable Software and Affected Versions: gturri aXMLRPC versions up to 1.12.0 Description: A vulnerability was found in the ResponseParser function of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference...

PT-2023-14431

Name of the Vulnerable Software and Affected Versions: Nexxt Amp300 ARN02304U8 version 42.103.1.5095 Nexxt Amp300 ARN02304U8 version 80.103.2.5045 Description: The web service on Nexxt Amp300 ARN02304U8 devices allows remote OS command execution by placing in the JSON host field to the "ping"...

PT-2023-1016 · Vim +8 · Vim +8

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.1144 Description: The issue is related to a heap-based buffer overflow in the msg puts printf function of the Vim text editor, which can be exploited to execute arbitrary code on the target system. This is a result o...

PT-2023-12402 · Hesburgh Libraries Of Notre Dame · Sipity

Name of the Vulnerable Software and Affected Versions: Hesburgh Libraries of Notre Dame Sipity versions prior to 2021.8 Description: A critical issue has been found, affecting the SearchCriteriaForWorksParameter function in the file app/parameters/sipity/parameters/search criteria for works...

PT-2023-9995 · Ziftr · Ziftr Primecoin

Name of the Vulnerable Software and Affected Versions: Ziftr primecoin versions up to 0.8.4rc1 Description: A vulnerability was found in the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing...

PT-2023-24655

Name of the Vulnerable Software and Affected Versions Salt-SSH affected versions not specified Description The issue concerns a predictable script path in the Salt-SSH pre-flight option, allowing an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and kno...

PT-2022-28142 · Unknown · Modbus Poll

Name of the Vulnerable Software and Affected Versions: Modbus Tools Modbus Poll versions up to 9.10.0 Description: A critical issue was found in the mbpoll.exe file of the mbp File Handler component, leading to a buffer overflow. This can be exploited remotely. The issue affects some unknown...

PT-2022-27918 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the cameo.cameo.netstat rsname parameter in the tools netstat function, specifically within the sub 41E730 function. Recommendations: For TRENDne...

PT-2022-28133 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks a user into performing unintended actions on a web application...

PT-2022-8066 · Pypi · Yolapi

Name of the Vulnerable Software and Affected Versions: yolapi affected versions not specified Description: A problematic vulnerability was found in yolapi, affecting the render description function of the file yolapi/pypi/metadata.py. The manipulation of the text argument leads to cross-site...