PT-2023-14702 · Shenzhen Zhiboton Electronics · Zbt We1626 Router

Name of the Vulnerable Software and Affected Versions: Shenzhen Zhiboton Electronics ZBT WE1626 Router version 21.06.18 Description: An issue in the router allows attackers to escalate privileges via the WGET command to the "Network Diagnosis" endpoint. Recommendations: For Shenzhen Zhiboton...

PT-2023-16779 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to resolve th...

PT-2023-19422 · Jensen Of Scandinavia · Jensen Of Scandinavia Eagle 1200Ac

Name of the Vulnerable Software and Affected Versions: Jensen of Scandinavia Eagle 1200AC version 15.03.06.33 en Description: A stack overflow issue was discovered via the wepkey parameter at the "/goform/WifiBasicSet" API endpoint. This issue affects the Jensen of Scandinavia Eagle 1200AC device...

PT-2023-19416 · Jensen Of Scandinavia · Jensen Of Scandinavia Eagle 1200Ac

Name of the Vulnerable Software and Affected Versions: Jensen of Scandinavia Eagle 1200AC version 15.03.06.33 en Description: A stack overflow issue was discovered via the wepkey2 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For version 15.03.06.33 en, avoid using the...

PT-2023-19686 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.5 and earlier Description: The issue concerns a 'RabbitMQ' version disclosure vulnerability. A user with remote access to NetWorker clients may potentially exploit this vulnerability and launch target-specific...

PT-2023-16563 · Unknown · Dash 7 Alliance Protocol

Name of the Vulnerable Software and Affected Versions: DASH 7 Alliance protocol versions prior to 0.5.0 Description: The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write. If the protocol has been compiled using default settings, th...

PT-2023-21043 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: A missing permissions check in Mattermost Playbooks allows an attacker to modify a playbook via the "/plugins/playbooks/api/v0/playbooks/playbookID" API endpoint, using the playbookID...

PT-2023-19725 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Description parameter under the Create ticket function. Recommendations...

PT-2023-19724 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter on the registration page. Recommendations: For Simple...

PT-2023-16726 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical vulnerability was found in the SourceCodester Doctors Appointment System. This issue affects the file /admin/doctors.php of the component Parameter Handler. The...

PT-2023-20781 · Unknown · Sme.Up Erp Tokyo

Name of the Vulnerable Software and Affected Versions: Sme.UP ERP TOKYO version V6R1M220406 Description: The issue is related to an OS command injection vulnerability. This vulnerability occurs via calls made to the XMService component. Recommendations: For Sme.UP ERP TOKYO version V6R1M220406, a...

Simple Food Ordering System 1.0 Cross Site Scripting

Simple Food Ordering System - Authenticated Reflected Cross Site Scripting Date: 17 February 2023 CVE Assigned: CVE-2023-0902 mitre.org nvd.nist.org Author Email: [email protected] Vendor Homepage: https://www.sourcecodester.com Software Link: Simple Food Ordering System Version: v 1.0...

PT-2023-19522 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability is present in the component edit organizer.php. Recommendations: For Judging Management System version 1.0,...

PT-2023-18891 · Korenix · Korenix Jetwave 3200 Series +1

Name of the Vulnerable Software and Affected Versions: Korenix JetWave 4200 Series version 1.3.0 Korenix JetWave 3200 Series version 1.6.0 Description: The issue is related to a Denial of Service vulnerability. It can be exploited via the "/goform/formDefault" API endpoint. Recommendations: For...

PT-2023-20317 · Versionn · Versionn

Name of the Vulnerable Software and Affected Versions: versionn versions prior to 1.1.0 Description: The issue is a command injection vulnerability. It affects all versions of versionn prior to 1.1.0. This vulnerability allows for command injection, which can be exploited by attackers...

PT-2023-12185 · Erxes · Erxes

Name of the Vulnerable Software and Affected Versions: Erxes versions 0.22.3 and prior Description: Erxes, an experience operating system XOS with a set of plugins, is vulnerable to cross-site scripting. This results in client-side code execution. The victim must follow a malicious link or be...

PT-2023-2270 · Solarwinds · Solarwinds Server/Application Monitor

Name of the Vulnerable Software and Affected Versions: Solarwinds Server & Application Monitor affected versions not specified Description: The issue is related to weaknesses in the authentication procedure, allowing a remote attacker to bypass authentication and access confidential information...

PT-2023-11538 · Kevinpapst · Kimai2

Name of the Vulnerable Software and Affected Versions: kevinpapst kimai2 version 1.30.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to gain escalated privileges. This vulnerability is located in the /src/Twig/Runtime/MarkdownExtension.php...

PT-2023-3274 · Schneider Electric · Struxureware Data Center Expert

Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: The issue is related to insufficient protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting attack in the DCE file upload endpoin...

PT-2023-20162 · Unknown +5 · Gss-Ntlmssp +5

Name of the Vulnerable Software and Affected Versions: GSS-NTLMSSP versions prior to 1.2.0 Description: The issue is related to memory corruption that can be triggered when decoding UTF16 strings. The variable outlen was not initialized, which could cause writing a zero to an arbitrary place in...