14718 matches found
PT-2023-14436 · Bulutses Information Technologies · Bulutses Call Center System
Name of the Vulnerable Software and Affected Versions: Bulutses Information Technologies Call Center System versions prior to 3.0 Description: The issue is related to an unauthenticated Sql Injection vulnerability. This vulnerability has been fixed in version 3.0. Recommendations: For versions...
PT-2023-2419 · Western Digital · Western Digital My Cloud
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS versions prior to 5.26.119 Description: The issue is related to the FTP service, where an incorrect restriction of a directory path name with limited access allows an attacker to read and write arbitrary files. Thi...
CVE-2023-0131
Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2023-13003 · Talend · Talend Administration Center
Name of the Vulnerable Software and Affected Versions: Talend Administration Center version 7.3.1.20200219 Description: The Forgot Password feature in the affected software provides different error messages for invalid reset attempts depending on whether the email address is associated with any...
PT-2023-13945 · WordPress · Royal Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons WordPress plugin versions prior to 1.3.56 Description: The issue is related to the lack of authorization and CSRF checks when deleting a template, and it does not ensure that the post to be deleted is a template. Th...
PT-2023-10141 · Lukehutch · Gribbit
Name of the Vulnerable Software and Affected Versions: lukehutch Gribbit affected versions not specified Description: A problematic issue was found in lukehutch Gribbit, affecting the messageReceived function of the file src/gribbit/request/HttpRequestHandler.java. This issue leads to missing...
PT-2023-13509 · Zoom · Zoom Rooms For Macos
Name of the Vulnerable Software and Affected Versions: Zoom Rooms for macOS versions prior to 5.11.4 Description: The issue concerns an insecure key generation mechanism in Zoom Rooms for macOS. Specifically, the encryption key used for Inter-Process Communication IPC between the Zoom Rooms daemo...
PT-2023-15021 · Apache · Sling App Cms
Name of the Vulnerable Software and Affected Versions: Sling App CMS versions 1.1.2 and prior Description: The issue is related to an improper neutralization of input during web page generation, also known as Cross-site Scripting. This may allow an authenticated remote attacker to perform a...
PT-2023-1012 · Sap · Sap Bpc Ms
Name of the Vulnerable Software and Affected Versions: SAP BPC MS 10.0 version 810 Description: The issue allows an unauthorized attacker to execute crafted database queries, potentially leading to SQL injection. This could enable an attacker to access, modify, and/or delete data from the backend...
PT-2023-12412 · Webpa · Webpa
Name of the Vulnerable Software and Affected Versions: WebPA versions up to 3.1.1 Description: A critical issue affects some unknown processing, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world...
PT-2023-10210 · Unknown · Purpleparrots 491-Project
Name of the Vulnerable Software and Affected Versions: purpleparrots 491-Project affected versions not specified Description: A critical issue was found in the Highscore Handler component of the file update.php, leading to sql injection. The estimated number of potentially affected devices...
PT-2023-11815
Name of the Vulnerable Software and Affected Versions square squalor versions prior to v0.0.0 Description A critical issue was found in square squalor, affecting an unknown part, leading to sql injection. The manipulation with the table name parameter is potentially vulnerable to SQL injection...
PT-2023-1098 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom for Android versions prior to 5.13.0 Description: The issue is related to incorrect restriction of the path name to a directory with limited access, allowing a third-party app to exploit this and read and write to the Zoom application da...
PT-2023-10118 · Unknown · Kassi Xingwall
Name of the Vulnerable Software and Affected Versions: kassi xingwall affected versions not specified Description: A critical issue has been found in kassi xingwall, affecting some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. Recommendation...
PT-2023-14793 · Zimbra · Zimbra Collaboration
Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration ZCS version 9.0 Description: An issue was discovered in Zimbra Collaboration where XSS can occur via one of the attributes in webmail URLs, allowing the execution of arbitrary JavaScript code and leading to information...
PT-2023-14570 · Efs · Efs Software Easy Chat Server
Name of the Vulnerable Software and Affected Versions: Efs Software Easy Chat Server version 3.1 Description: The issue allows attackers to execute arbitrary code via a crafted DLL, exploiting a DLL hijacking vulnerability through the TextShaping.dll component. Recommendations: For Efs Software...
GHSA-H8R9-467R-VJJF pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...
PT-2023-18595 · Pghero · Pghero
Name of the Vulnerable Software and Affected Versions: PgHero versions prior to 3.1.0 Description: The issue allows information disclosure via EXPLAIN, as query results may be present in an error message. Depending on database user privileges, this may disclose information from the database or fr...
PT-2023-15885 · Unknown · Evolution Events Artaxerxes
Name of the Vulnerable Software and Affected Versions: Evolution Events Artaxerxes affected versions not specified Description: A vulnerability was found in the component POST Parameter Handler, affecting unknown code of the file arta/common/middleware.py. The manipulation of the password argumen...
