PT-2023-18898 · Ciq Api · Ciq Api

Name of the Vulnerable Software and Affected Versions: CIQ API versions 3.2.0 through 4.1.7 Description: The issue concerns the Toybox.Ant.GenericChannel.enableEncryption API method, which fails to validate its parameters. This can lead to buffer overflows when copying attributes, potentially...

PT-2023-15076 · WordPress · Brainstorm Force Starter Templates

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates plugin versions = 3.1.20 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

PT-2023-19836 · WordPress · The Go Pricing - Wordpress Responsive Pricing Tables

Name of the Vulnerable Software and Affected Versions: The Go Pricing - WordPress Responsive Pricing Tables plugin versions up to, and including, 3.3.19 Description: The issue allows unauthorized modification of data due to a missing capability check on the process postdata function. This makes i...

PT-2023-15210 · Aram Kocharyan · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Aram Kocharyan Crayon Syntax Highlighter plugin versions = 2.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-20986 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue is due to missing nonce validation on the enable safe mode function, making it possible for unauthenticated attackers to enable safe mode via a forg...

PT-2023-20979 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue allows unauthorized access and modification of data due to a missing capability check on the ajax upload file function. This enables authenticated...

PT-2023-20972 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue is related to a missing capability check on the check license functions, allowing authenticated attackers with subscriber-level permissions and abov...

PT-2023-19142 · Unknown · Arconix Shortcodes

Name of the Vulnerable Software and Affected Versions: Arconix Shortcodes plugin versions = 2.1.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher authentication levels. There is no information provided about the...

PT-2023-23414 · Luowice · Luowice

Name of the Vulnerable Software and Affected Versions: luowice version 3.5.18 Description: The issue allows attackers to view information for other alarm devices by modifying the eseeid parameter, due to insecure permissions. Recommendations: For luowice version 3.5.18, restrict access to the...

PT-2023-22669 · Unknown · Moveit Framework

Name of the Vulnerable Software and Affected Versions: MoveIt framework version 1.1.11 Description: The issue concerns a cross-site scripting XSS flaw via the API authentication function. This allows for potential malicious script execution. No information is provided about the estimated number o...

PT-2023-21395 · Unknown · Liquid Speech Balloon

Name of the Vulnerable Software and Affected Versions: LIQUID SPEECH BALLOON versions prior to 1.2 Description: A cross-site request forgery CSRF issue allows a remote unauthenticated attacker to hijack the authentication of a user and perform unintended operations by having a user view a malicio...

PT-2023-22648 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version 11.10.00.2211041355 Description: The issue concerns a hard-coded default password for the RTSP feed. Recommendations: For version 11.10.00.2211041355, consider changing the default password for t...

PT-2023-21394 · Joruri Gw · Joruri Gw

Name of the Vulnerable Software and Affected Versions: Joruri Gw versions 3.2.5 and earlier Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via the Message Memo function of the affected product. Recommendations: For versions 3.2.5 and...

PT-2023-15414 · WordPress · Fugu Maintenance Switch

Name of the Vulnerable Software and Affected Versions: Fugu Maintenance Switch plugin versions = 1.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...

PT-2023-14923 · Unknown · Weston Embedded Uc-Ftps

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-FTPs version 1.98.00 Description: An out-of-bounds read issue exists in the PORT command parameter extraction functionality. This can be triggered by a specially-crafted set of network packets, leading to denial of service...

PT-2023-13345 · Intel · Intel Nuc Pro Kit +6

Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kits affected versions not specified IntelR NUC Performance Kits affected versions not specified IntelR NUC Performance Mini PC affected versions not specified IntelR NUC 8 Compute Element affected versions not...

PT-2023-19281 · WordPress · Kanban For Wordpress

Name of the Vulnerable Software and Affected Versions: Kanban for WordPress Kanban Boards for WordPress plugin versions = 2.5.20 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject...

PT-2025-26083 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the mc pcie init irq domains function. The of get next child function returns a node pointer with an...

PT-2025-25899 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, which fixes a wrong last sg check in sk msg recvmsg. This issue leads to a kernel NULL pointer dereference. The problem arises fr...

PT-2025-25214

Name of the Vulnerable Software and Affected Versions Perl CryptX versions prior to 0.087 Description The issue is related to an integer overflow associated with a dependency in the libtommath library embedded in Perl CryptX. This library is susceptible to an integer overflow. Recommendations For...