PT-2023-18280 · Unknown +1 · Remote Procedure Call (Rpc) Runtime +1

Name of the Vulnerable Software and Affected Versions: Remote Procedure Call Runtime affected versions not specified Description: A denial-of-service issue allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not available. There is no informati...

PT-2023-14406 · WordPress · Ipages Flipbook For Wordpress

Name of the Vulnerable Software and Affected Versions: iPages Flipbook For WordPress plugin versions 1.4.6 and earlier Description: The issue allows users, such as those with contributor+ roles, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly...

PT-2023-14112 · Ibm · Ibm Business Automation Workflow

Name of the Vulnerable Software and Affected Versions: IBM Business Automation Workflow versions 18.0.0 through 22.0.1 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

PT-2023-14170 · WordPress · White Label Cms

Name of the Vulnerable Software and Affected Versions: White Label CMS WordPress plugin versions prior to 2.5 Description: The issue allows high-privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present. This is due to the plugin unserializing user input...

PT-2022-27922 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the update file name parameter in the auto up fw sub 420A04 function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider restrictin...

PT-2022-28028 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the wrlEn parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, avoid using the wrlEn parameter in the...

PT-2022-27908 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the wifi captive portal function, specifically via the user edit page parameter. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider...

PT-2022-28017 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered via the wepauth parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, avoid using the wepauth parameter in th...

PT-2022-27928 · Trendnet · Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the setbg num parameter in the icp setbg img sub 41DD68 function. This issue can be exploited, potentially allowing for unauthorized access or control...

PT-2022-8356 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue. It appears to be a notification about a candidate number that is not in use. Recommendations: At the...

PT-2022-28085 · Xstream · Stream

Name of the Vulnerable Software and Affected Versions: StreamX versions 6.02.01 through 6.04.34 Description: The issue allows authenticated users to gain unauthorized access to files on the server's filesystem due to a path traversal vulnerability. This affects StreamX applications that use the...

PT-2022-19879 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 8.2 Description: The issue allows for XSS because BMFreehand10 and image/x-freehand are not blocked. Recommendations: For OX App Suite versions through 8.2, consider blocking BMFreehand10 and image/x-freehand to...

PT-2022-27978

Name of the Vulnerable Software and Affected Versions TrueConf Server version 5.2.0.10225 Description A SQL injection issue in the web API allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution. Recommendations For TrueConf Server...

PT-2022-27933 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version A1 FW100A43 Description: A command injection issue was discovered via the auto upgrade hour parameter in the SetAutoUpgradeInfo function. This allows for potential exploitation. No information is provided about the...

PT-2022-27622 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the sPortMapIndex parameter in the formDelPortMapping function. This issue can potentially be exploited, although specific details about the number of...

PT-2022-27625 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A command injection issue was found via the hostname parameter in the formSetNetCheckTools function. This allows for potential command injection attacks. Recommendations: For IP-COM M50 version...

PT-2022-6230 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 1.20B03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this issue. The specific flaw...

PT-2022-27621 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the rules parameter in the formAddDnsHijack function. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to the...

PT-2022-27738 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to a code flaw in the ust sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. Recommendations: For AyaCMS version 3.1.2, consider restricting...

PT-2022-27800 · Unknown · Daloradius

Name of the Vulnerable Software and Affected Versions: daloradius versions prior to master Description: The issue concerns a sensitive cookie without the 'HttpOnly' flag in the GitHub repository lirantal/daloradius. This could potentially allow unauthorized access to sensitive information...