PT-2023-23711 · Yoast · Yoast Seo

Name of the Vulnerable Software and Affected Versions: Yoast Yoast SEO: Local plugin versions = 14.8 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations: For versions = 14.8, update to a version higher than 14.8 to resolve the issue...

PT-2023-22071 · Ux Themes · Ux-Themes Flatsome Plugin

Name of the Vulnerable Software and Affected Versions: UX-themes Flatsome plugin versions = 3.16.8 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for reflected cross-site scripting attacks without authentication...

PT-2023-23660 · Walchem · Walchem Intuition 9

Name of the Vulnerable Software and Affected Versions: Walchem Intuition 9 firmware versions prior to v4.21 Description: The issue concerns improper authentication in the Walchem Intuition 9 firmware. Login credentials are stored in a format that could allow an attacker to use them as-is to login...

PT-2023-6986 · Icewarp · Icewarp Server

Name of the Vulnerable Software and Affected Versions: IceWarp Server version 11.4.6.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks via the color parameter...

PT-2023-11669 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue is related to a Buffer Overflow vulnerability in the psdParser::UnpackRLE function in PSDParser.cpp. This vulnerability allows remote attackers to cause a denial of service via the opening of a...

PT-2023-27114 · N.V.K.Inter Co. · Ibsg

Name of the Vulnerable Software and Affected Versions: N.V.K.INTER CO., LTD. NVK iBSG version 3.5 Description: A SQL injection issue was found via the a passwd parameter at the "/portal/user-register.php" API endpoint. This allows for potential exploitation of the system. Recommendations: For...

PT-2023-6025 · Jenkins · Jenkins Fortify Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Fortify Plugin versions 22.1.38 and earlier Description: The issue is related to the failure to protect the web page structure, allowing a remote attacker to perform an HTML injection. This occurs because the error message for a form...

PT-2023-27105

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06 Description A stack overflow issue was discovered via the list parameter in the set qosMib list function. This issue affects the Tenda AC8V4 router. Recommendations For Tenda AC8V4 version 16.03.34.06, consider...

PT-2023-27036 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version B20210419 Description: A remote code execution issue was found in the setTracerouteCfg interface, allowing for potential code execution. Recommendations: For TOTOLINK X5000R version B20210419, consider restricting acce...

PT-2023-26681 · Unknown +2 · Carousel Wiget +3

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.3.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered in the 'Carousel Wiget' section and choosing the carousel widget created above, in 'Photo URL' and 'YouTube...

PT-2023-4453 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a buffer overflow in the fgets function of the D-Link DIR-880 router's firmware. This could allow a remote attacker to execute arbitrary code. Recommendations: For D-Link DIR-8...

PT-2023-21909 · WordPress · Balasaheb Bhise Advanced Youtube Channel Pagination

Name of the Vulnerable Software and Affected Versions: Balasaheb Bhise Advanced Youtube Channel Pagination plugin version 1.0 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the injection of malicious...

PT-2023-18557 · WordPress · Ko-Fi Button

Name of the Vulnerable Software and Affected Versions: Ko-fi Button WordPress plugin versions prior to 1.3.3 Description: The issue concerns the Ko-fi Button WordPress plugin, which does not properly handle some of its settings. This could allow high-privilege users to perform Stored Cross-Site...

PT-2023-26631 · Michaelrsweet · Codedoc

Name of the Vulnerable Software and Affected Versions: Michaelrsweet codedoc version 3.7 Description: A Buffer Overflow issue allows an attacker to cause a denial of service via the codedoc.c:1742 component. This can lead to a denial of service. Recommendations: For version 3.7, consider disablin...

PT-2023-4480

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 116.0.5845.96 Description The issue is related to insufficient validation of untrusted input in XML, allowing a remote attacker to bypass file access restrictions via a crafted HTML page. This can impact the...

PT-2023-27134 · Unknown · Schoolmate

Name of the Vulnerable Software and Affected Versions: Schoolmate version 1.3 Description: The issue is related to multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the $courseid and $teacherid parameters at the DeleteFunctions.php file. There is no information...

PT-2023-27127 · Etekcity · Etekcity 3-In-1 Smart Door Lock

Name of the Vulnerable Software and Affected Versions: Etekcity 3-in-1 Smart Door Lock version v1.0 Description: The issue is related to missing encryption in the RFID tag of the Etekcity 3-in-1 Smart Door Lock, which allows attackers to create a cloned tag via brief physical proximity to the...

PT-2023-11743 · Thinkcmf · Thinkcmf

Name of the Vulnerable Software and Affected Versions: ThinkCMF version 5.1.5 Description: The issue is a Cross Site Scripting XSS vulnerability in the UserController.php file, which allows attackers to execute arbitrary code via a crafted user login. This can lead to unauthorized access and...

PT-2023-11663 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: jerryscript version 2.3.0 Description: An issue in ecma-helpers.c allows local attackers to cause a denial of service DoS due to a Null Pointer Dereference. This issue enables local attackers to potentially disrupt service availability...

PT-2023-22885 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is an out-of-bounds write in the RmtUimApdu of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations: For versions prior to SMR Aug-2023...