PT-2023-20866 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to an arbitrary file upload vulnerability in the /admin1/config/update component, allowing attackers to execute arbitrary code via a crafted PHP file. Recommendations: For onekeyadmi...

PT-2023-2076 · Netup · Netup Iptv Combine

Name of the Vulnerable Software and Affected Versions: NetUP IPTV Combine affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the NetUP IPTV Combine administration web interface. This can be exploited by a remote attacker to bypass...

PT-2023-20678 · Vega · Vega

Name of the Vulnerable Software and Affected Versions: Vega versions prior to 5.23.0 Description: The lassoAppend function in Vega accepts 3 arguments and internally invokes the push function on the 1st argument, specifying an array consisting of the 2nd and 3rd arguments as the push call argumen...

PT-2023-19415 · Jensen Of Scandinavia · Jensen Of Scandinavia Eagle 1200Ac

Name of the Vulnerable Software and Affected Versions: Jensen of Scandinavia Eagle 1200AC version 15.03.06.33 en Description: A stack overflow issue was discovered via the wrlEn parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Jensen of Scandinavia Eagle 1200AC version...

PT-2023-19423 · Jensen Of Scandinavia · Jensen Of Scandinavia Eagle 1200Ac

Name of the Vulnerable Software and Affected Versions: Jensen of Scandinavia Eagle 1200AC version V15.03.06.33 en Description: A stack overflow issue was discovered via the wepkey1 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Jensen of Scandinavia Eagle 1200AC...

PT-2023-19303 · Vantage6 · Vantage6

Name of the Vulnerable Software and Affected Versions: vantage6 versions prior to 3.8.0 Description: The issue concerns the refresh token in vantage6, a privacy-preserving federated learning infrastructure, which is currently valid indefinitely. This is considered bad security practice. The refre...

PT-2023-11318 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...

PT-2023-19727 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter under the "Request a Quote" function. Recommendations: F...

PT-2023-10753 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability, but rather a notification from the National Vulnerability Database regarding a rejected CVE...

PT-2023-19726 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the oldpass parameter under the Change Password function. Recommendations:...

PT-2023-12200 · Umbraco · Umbraco Forms

Name of the Vulnerable Software and Affected Versions: Umbraco Forms version 8.7.0 Description: The issue allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file. This is a result of a file upload vulnerability. Recommendations: For Umbraco Forms version...

PT-2023-13560 · Hewlett Packard · Hpe Serviceguard Manager

Name of the Vulnerable Software and Affected Versions: Serviceguard Manager affected versions not specified Description: The issue is related to an unauthenticated Java deserialization vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2023-19397 · H3C · H3C A210-G

Name of the Vulnerable Software and Affected Versions: H3C A210-G version A210-GV100R005 Description: The issue is related to access control, allowing attackers to authenticate without a password. Recommendations: For H3C A210-G version A210-GV100R005, consider restricting access to the device...

PT-2023-36092 · Ftp · Ftp

Name of the Vulnerable Software and Affected Versions: ftp affected versions not specified Description: The ftp crate is no longer maintained. It is recommended to use the suppaftp crate instead. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-35998 · Git +1 · Libgit2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow read. Technical details include a crash type of Heap-buffer-overflow READ and a crash state involving...

PT-2023-16598 · WordPress · The Wp Coder

Name of the Vulnerable Software and Affected Versions: The WP Coder – add custom html, css and js code plugin for WordPress versions up to, and including, 2.5.3 Description: The issue is related to time-based SQL Injection via the id parameter due to insufficient escaping on the user-supplied...

PT-2023-19844 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a local user to obtain sensitive information from log files. Recommendations: For IBM InfoSphere Information Server version 11.7, consider restricting access to log...

PT-2023-1544 · Fortinet · Fortiportal

Name of the Vulnerable Software and Affected Versions: FortiPortal versions 7.0.0 through 7.0.2 Description: The issue is related to an insertion of sensitive information into log files, which may allow a remote authenticated attacker to read other devices' passwords in the audit log page. This i...

PT-2023-13529 · Intel · Intel Quartus Prime Pro +1

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro and Standard Edition affected versions not specified Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privile...

PT-2023-1543

Name of the Vulnerable Software and Affected Versions Joomla! versions 4.0.0 through 4.2.7 Description An improper access check exists in Joomla! versions 4.0.0 through 4.2.7, allowing unauthorized access to webservice endpoints. Attackers can exploit this issue to gain access to sensitive...