PT-2023-16215 · WordPress · React Webcam Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: React Webcam WordPress plugin version 1.2.0 Description: The issue is related to the React Webcam WordPress plugin, which does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the...

PT-2023-16784 · Persolus · Persolus

Name of the Vulnerable Software and Affected Versions: Persolus versions prior to 2.03.93 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2023-19734 · Centralite · Centralite Pearl Thermostat

Name of the Vulnerable Software and Affected Versions: Centralite Pearl Thermostat version 0x04075010 Description: A vulnerability in the Centralite Pearl Thermostat allows attackers to cause a Denial of Service DoS via a crafted Zigbee message. Recommendations: For Centralite Pearl Thermostat...

PT-2023-16540 · Omron · Omron Cj1M

Name of the Vulnerable Software and Affected Versions: Omron CJ1M unit versions 4.0 and prior Description: The issue is related to improper access controls on the memory region where the UM password is stored. An adversary can issue a PROGRAM AREA WRITE command to a specific memory region,...

PT-2023-13535 · Unknown · Afs Analytics

Name of the Vulnerable Software and Affected Versions: AFS Analytics plugin versions prior to 4.19 Description: The issue is a Stored Cross-site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into the website, which will be executed by the user's browser. The...

PT-2023-19751 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the contact parameter in the user profile update function. Recommendations:...

PT-2023-19624 · Unknown · Advanced Authentication

Name of the Vulnerable Software and Affected Versions: Advanced Authentication versions prior to 6.4.1.1 Advanced Authentication versions prior to 6.3.7.2 Description: The issue is related to broken access control. There is no information provided about the estimated number of potentially affecte...

Microsoft Defender for Cloud Management Port Exposure Confusion

Prior to March 9, 2023, Microsoft Defender for Cloud incorrectly marked some Azure virtual machines as having secured management ports including SSH port 22/TCP, RDP port 3389/TCP and WINRM port 5985/TCP, when in fact one or more of these ports were exposed to the internet. This occured when the...

PT-2023-21047 · Sap · Sap Netweaver Application Server For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791 Description: The issue allows an attacker, authenticated as a non-administrative user, to craft a...

PT-2023-15418 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps plugin versions = 9.0.15 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability affects the WP Go Maps plugin, which w...

PT-2023-16202 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue allows an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type, as the device does not ensure that a file extension is...

PT-2023-16201 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue allows unauthenticated access to the camera capture for image and video, potentially enabling an attacker to view and record image and video from the camera. Recommendations: A...

PT-2023-16911 · WordPress · Rapidload Power-Up For Autoptimize

Name of the Vulnerable Software and Affected Versions: RapidLoad Power-Up for Autoptimize plugin for WordPress versions up to, and including, 1.7.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ucss connect function. This allow...

PT-2023-21009 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /admin/navbar.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2023-16863 · Dsm · Enovia Live Collaboration

Name of the Vulnerable Software and Affected Versions: ENOVIA Live Collaboration version V6R2013xE Description: An XML External Entity injection XXE vulnerability allows an attacker to read local files on the server, which can also lead to Remote File inclusions. Recommendations: For ENOVIA Live...

PT-2023-16849 · Unknown · Pttem Kart

Name of the Vulnerable Software and Affected Versions: PtteM Kart versions prior to 2.1 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection. This allows for potential manipulation of SQL commands, which could le...

PT-2023-35410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue concerns the use of the WQ MEM RECLAIM flag for workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-11836 · WordPress · Jetbackup

Name of the Vulnerable Software and Affected Versions: JetBackup – WP Backup, Migrate & Restore plugin for WordPress versions up to, and including 1.3.9 Description: The issue is due to missing nonce validation on the backup guard get import backup function, making it possible for unauthenticated...

PT-2023-35447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to an off-by-one error in the htb activate prios function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2023-16051 · WordPress · Cost Calculator

Name of the Vulnerable Software and Affected Versions: The Cost Calculator WordPress plugin versions 1.8 and earlier Description: The issue is related to the lack of validation and escaping of some shortcode attributes in the Cost Calculator WordPress plugin, which could allow users with the...