PT-2023-25566 · WordPress · Wpxpo Postx – Gutenberg Post Grid Blocks

Name of the Vulnerable Software and Affected Versions: wpxpo PostX – Gutenberg Post Grid Blocks plugin versions = 2.9.9 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into ...

PT-2023-20474 · Atera · Atera Agent

Name of the Vulnerable Software and Affected Versions: Atera Agent versions 1.8.4.4 and prior Description: A privilege escalation issue was discovered due to the mishandling of privileged APIs. This issue affects Atera Agent on Windows. Recommendations: For Atera Agent versions 1.8.4.4 and prior,...

PT-2023-4402

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 through master commit 530dbfa3 Description An out-of-bounds write issue exists in the CSR format title functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a...

PT-2023-23815 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions prior to 4.0 Description: The issue allows an authenticated malicious user to flood the configured SMTP server with numerous requests, resulting in a denial-of-service. This can deny access to the system...

PT-2023-21771 · Ibm · Ibm Mq Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.0 LTS through 9.3 LTS IBM MQ versions 9.2 CD through 9.3 CD IBM MQ Appliance versions 9.2 LTS through 9.3 LTS IBM MQ Appliance versions 9.2 CD through 9.2 LTS Description: The issue is caused by an error processing messages,...

PT-2023-21484 · Ibm · Bigfix Webui Api App

Name of the Vulnerable Software and Affected Versions: Bigfix WebUI API App versions prior to 14 Description: The issue is related to insufficient validation, allowing an authenticated WebUI user to issue SQL queries via an unparameterized SQL query. Recommendations: For versions prior to 14,...

PT-2023-4026 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 6.4.0.0.0 Description: The issue is related to errors in processing input data in the Visual Analyzer component of Oracle Business Intelligence Enterprise Edition. This can allow a remot...

PT-2023-14773 · Nootheme · Noo Timetable

Name of the Vulnerable Software and Affected Versions: NooTheme Noo Timetable plugin versions = 2.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-26163 · Pluginpress · Pluginpress Shortcode Imdb

Name of the Vulnerable Software and Affected Versions: PluginPress Shortcode IMDB plugin versions 6.0.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...

PT-2023-22561 · Prestashop · Payplug

Name of the Vulnerable Software and Affected Versions: PrestaShop module payplug versions 3.6.0 through 3.7.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ajax.php front controller, which is vulnerable to SQL injection attacks...

PT-2023-19157 · WordPress · Premmerce

Name of the Vulnerable Software and Affected Versions: Premmerce plugin versions = 1.3.17 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application tha...

PT-2023-4189 · Ibm +3 · Ibm Sdk +4

Name of the Vulnerable Software and Affected Versions: IBM SDK, Java Technology Edition versions 7.1.5.18 through 8.0.8.0 Description: The issue is related to an unsafe deserialization flaw in the Java Technology Edition, which could allow a remote attacker to execute arbitrary code on the system...

PT-2023-33012 · Unknown +3 · Remove Dir All +3

Name of the Vulnerable Software and Affected Versions: tempfile versions prior to the version that updates remove dir all to a non-vulnerable version remove dir all version 0.5.3 Description: The issue concerns a problem with the remove dir all function. Updating tempfile is necessary due to its...

PT-2023-5217 · Apache · Apache Eventmesh

Name of the Vulnerable Software and Affected Versions: Apache EventMesh incubating versions 1.7.0 through 1.8.0 Description: The issue is related to the deserialization of untrusted data in the rabbitmq-connector plugin module, allowing attackers to send controlled messages and execute remote cod...

PT-2023-3843 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to perfor...

PT-2023-25877 · Autogpt · Autogpt

Name of the Vulnerable Software and Affected Versions: Auto-GPT versions prior to 0.4.3 Description: The issue allows for a path traversal attack, enabling the overwrite of any .py file outside the workspace directory by specifying a malicious basename argument, such as ../../../main.py. This can...

PT-2023-3800 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to a Path Traversal vulnerability that allows a remote authenticated attacker to read arbitrary files from the...

PT-2024-9626

Name of the Vulnerable Software and Affected Versions golang.org/x/crypto versions prior to 0.31.0 Description The issue is related to the misuse of the ServerConfig.PublicKeyCallback callback in applications and libraries, which may lead to an authorization bypass. The SSH protocol allows client...

PT-2023-12527 · WordPress · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart plugin for WordPress versions up to, and including, 2.8.28 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the sunshine products quicksave post function. This...

PT-2023-26050 · Unknown · Online Piggery Management System

Name of the Vulnerable Software and Affected Versions: Online Piggery Management System version 1.0 Description: The issue allows an unauthenticated user to upload a php file by sending a POST request to the "add-pig.php" endpoint. This enables potential malicious activities. Recommendations: For...