PT-2023-32640 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue was found in the PHPGurukul Nipah Virus Testing Management System. This issue affects the file add-phlebotomist.php and allows for SQL injection throug...

PT-2023-26459 · WordPress · Campaign Monitor For Wordpress

Name of the Vulnerable Software and Affected Versions: Campaign Monitor for WordPress versions through 2.8.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2023-30786 · Unknown · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager versions n/a through 6.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js Module._load() module (CVE-2023-32002)

Summary This security vulnerability affects a required node.js module within IBM Event Streams UI component. CVE-2023-32002 Vulnerability Details CVEID:CVE-2023-32002 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by the use of Module.load. By sending a...

PT-2023-29562 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the list parameter in the sub 49E098 function. Recommendations: For Tenda AC10 version US AC10V4.0si V16.03.10.13 cn, consider restricting...

PT-2023-29564 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the shareSpeed parameter in the fromSetWifiGuestBasic function. Recommendations: For Tenda AC10 version US AC10V4.0si V16.03.10.13 cn,...

PT-2023-28293 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS versions prior to 1.11.24 Description: The issue concerns improper neutralisation of special characters, allowing command injection in the main/lp/openoffice presentation.class.php file. This enables users who are permitted to...

PT-2023-7436 · Phoenix · Phoenix Securecore Technology

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore Technology version 4 Description: The issue is related to improper input validation in the processing of user-supplied splash screens during system boot. This could potentially allow an attacker to cause a denial-of-service...

PT-2023-7439 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master version 1.0.7 Description: A vulnerability exists in Delta Electronics InfraSuite Device Master that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtai...

PT-2023-32566 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue is related to improper authorization in the "/plugins/focalboard/api/v2/users" endpoint, allowing an attacker who is a guest user and knows the ID of another user to obtain the...

PT-2023-23578 · Unknown · Orocommerce

Name of the Vulnerable Software and Affected Versions: OroCommerce versions prior to 5.0.11 OroCommerce versions prior to 5.1.1 Description: The issue allows back-office users to access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient...

PT-2023-31036 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the wpapsk crypto parameter in the fromSetWirelessRepeat function. This enables the attacker to potentially gain control over the syste...

PT-2023-31035 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi. This enables the attacker to potentially gain...

Teams - Error "Your Admin has restricted Access to the New Teams" in ICA session

When launching New Teams within Remote PC / ICA session, it seems to logon fine the first time. But when the user logs out and logs back in again to Teams the second time and any subsequent attempt, they see the following error message: "Your Admin has restricted Access to the New Teams"...

PT-2023-32210 · Tacc · Tacc Epo Extension

Name of the Vulnerable Software and Affected Versions: TACC ePO extension versions prior to 8.4.0 Description: The issue is related to an improper limitation of a path name to a restricted directory, which could allow an authorized administrator attacker to execute arbitrary code by uploading a...

PT-2023-7526 · Squid +10 · Squid +11

Name of the Vulnerable Software and Affected Versions: Squid versions prior to 6.5 Description: The issue is related to insufficient checking of exceptional states in the Squid proxy server, which can be exploited by a remote attacker to cause a denial of service. Squid is a caching proxy for the...

WP Maintenance < 6.1.4 - IP Restriction Bypass

Description The WP Maintenance plugin for WordPress is vulnerable to IP Address Restriction Bypass in versions up to, and including, 6.1.3. This can be used to bypass settings that may have blocked out an IP address from accessing a page on the site...

Improper Restriction of Operations within the Bounds of a Memory Buffer

Overview Affected versions of this package are vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer via the wasmloaderpreparebytecode function in core/iwasm/interpreter/wasmloader.c. An attacker can cause a denial of service by exploiting this vulnerability...

PT-2023-28108 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables the execution of Javascript code in the news section of the...

CVE-2023-6009 UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation

The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.4 due to insufficient restriction on the 'userproupdateuserprofile' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify...