PT-2023-16496 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is related to Cross-site Scripting XSS, a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user'...

PT-2023-16495 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can then be...

PT-2023-10253 · Openseamap · Openseamap Online Chart

Name of the Vulnerable Software and Affected Versions: OpenSeaMap online chart version 1.2 Description: A vulnerability was found in the function init of the file index.php. The manipulation of the argument mtext leads to cross site scripting. It is possible to launch the attack remotely...

PT-2023-12675 · Opensuse · Opensuse

Name of the Vulnerable Software and Affected Versions: openSUSE paste versions prior to b57b9f87e303a3db9465776e657378e96845493b Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue allows remote attackers to place Javascript into SVG files...

PT-2023-1353 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: Dompdf versions prior to 2.0.3 Description: The issue arises from the difference in attribute parsing between Dompdf and php-svg-lib, allowing an attacker to call arbitrary URLs with arbitrary protocols. Dompdf respects the xlink:href attribu...

CVE-2023-0070 ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS

The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

CVE-2022-41342

Improper buffer restrictions in the IntelR C++ Compiler Classic before version 2021.7.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41342

Improper buffer restrictions in the IntelR C++ Compiler Classic before version 2021.7.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-1572 · Unknown · Gimmie Plugin

Name of the Vulnerable Software and Affected Versions: Gimmie Plugin version 1.2.2 Description: A critical vulnerability was found in the Gimmie Plugin, affecting an unknown function of the file trigger ratethread.php. The manipulation of the t/postusername argument leads to SQL injection. This...

PT-2023-12275 · Imcat · Imcat

Name of the Vulnerable Software and Affected Versions: imcat version 5.4 Description: The issue allows remote attackers to escalate privilege via a lack of token verification, which is a result of a Cross Site Request Forgery vulnerability. Recommendations: For imcat version 5.4, consider...

PT-2023-12273 · Jocms · Jocms

Name of the Vulnerable Software and Affected Versions: jocms version 0.8 Description: The issue allows remote attackers to execute arbitrary SQL commands and view sensitive information. This is achieved via the jo json check function in jocms/apps/mask/inc/getmask.php. Recommendations: For jocms...

PT-2023-12281 · Unknown · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: native-php-cms version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat parameter in the /list.php file, enabling attackers to inject malicious SQL code...

Security Bulletin: IBM Aspera Orchestrator affected by vulnerability ( CVE-2022-31813)

Summary The following vulnerability has been addressed in IBM Aspera Orchestrator 4.0.1. Vulnerability Details CVEID:CVE-2022-31813 DESCRIPTION: Apache HTTP Server could allow a remote attacker to bypass security restrictions, caused by the failure to send the X-Forwarded- headers to the origin...

PT-2023-1307 · Moxa · Moxa Sds-3008 Series Industrial Ethernet Switch

Name of the Vulnerable Software and Affected Versions: Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1 Description: An information disclosure issue exists in the web application functionality, allowing a specially-crafted HTTP request to disclose sensitive information. An attacker can...

PT-2023-20024 · World Wide Broadcast Network · Avideo

Name of the Vulnerable Software and Affected Versions: World Wide Broadcast Network AVideo versions prior to 12.4 Description: The issue allows attackers to execute arbitrary code via the video link field to the Embed a video link feature. An attacker could execute remote code on a system running...

PT-2023-13602 · Ibm · Ibm Tivoli Workload Scheduler

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Workload Scheduler versions 9.4 through 10.1 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...

PT-2023-13891 · WordPress · Wp Sunshine Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart plugin versions 2.9.13 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

Mozilla Thunderbird Security Advisory (MFSA2023-04) - Windows

Thunderbird is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mitsubishi Electric GOT2000 Series and GT SoftGOT2000

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Corporation Equipment: GOT Mobile Function on GOT2000 Series and GT SoftGOT2000 Vulnerabilities: Authentication Bypass by Spoofing, Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION...

PT-2023-18832 · Zoho · Zoho Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus version 14 Description: The issue is a cross site scripting XSS vulnerability. It affects the purchase component via PO. Recommendations: For Zoho ManageEngine ServiceDesk Plus version 14, update to a versio...