PT-2023-18554 · Oracle +1 · Java +2

Name of the Vulnerable Software and Affected Versions: Bamboo Data Center and Server versions 8.1.0 through 9.3.0 Description: This issue allows an authenticated attacker to execute arbitrary code, which has high impact to confidentiality, integrity, and availability, and requires no user...

PT-2023-26658 · Unknown · Opensis Classic

Name of the Vulnerable Software and Affected Versions: openSIS Classic version 9.0 Description: The issue allows remote attackers to read arbitrary files via a directory traversal vulnerability in the filename parameter of the "DownloadWindow.php" endpoint. Recommendations: For version 9.0,...

PT-2023-7639 · D Link · D-Link Go-Rt-Ac750

Name of the Vulnerable Software and Affected Versions: D-Link Go-RT-AC750 revA v101b03 Description: The issue is related to a command injection vulnerability via the service parameter at "hedwig.cgi". This vulnerability is associated with a lack of input data sanitization measures in the D-LINK...

PT-2023-30557 · Unknown · Gopi Ramasamy Vertical Scroll Recent Post

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Vertical scroll recent post versions n/a through 14.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

PT-2023-30666 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer cms version 4.1.3 Description: The issue is related to Cross Site Request Forgery CSRF via adding permissions to CSRF in Permission Management. Recommendations: For Dreamer cms version 4.1.3, as a temporary workaround, consider...

PT-2023-23847 · Unknown · Himanshu Parashar Google Site Verification Plugin Using Meta Tag

Name of the Vulnerable Software and Affected Versions: Himanshu Parashar Google Site Verification plugin using Meta Tag versions 1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-7324 · Red Lion · Red Lion Versatrak +1

Name of the Vulnerable Software and Affected Versions: Red Lion SixTRAK and VersaTRAK Series RTUs affected versions not specified Description: The issue is related to the authentication function in Red Lion SixTRAK and VersaTRAK Series RTUs. When authenticated users are enabled, any Sixnet UDR...

PT-2023-32481

Name of the Vulnerable Software and Affected Versions MLflow affected versions not specified Description The issue allows an attacker to overwrite any file on the server hosting MLflow without authentication. This gives multiple ways to achieve code execution, such as overwriting /home//.bashrc. ...

PT-2023-30739 · Rundeck · Rundeck

Name of the Vulnerable Software and Affected Versions: Rundeck versions 4.12.0 through 4.16.0 Description: The issue allows authenticated users to access certain URL paths without necessary authorization checks, potentially enabling them to view or delete jobs. The affected URLs are:...

PT-2023-30376 · WordPress · Elementor Addon Elements

Name of the Vulnerable Software and Affected Versions: Elementor Addon Elements plugin for WordPress versions up to, and including, 1.12.7 Description: The issue allows unauthenticated attackers to extract sensitive data, including post/page ids and titles, via the ajax eae post data function. Th...

PT-2023-29595 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access points affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in the underlying CLI service. These vulnerabilities could lead to unauthenticated remote code execution by sending...

PT-2023-6988 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.2.2 through 8.3.0 Fortinet FortiWLM versions 8.3.2 through 8.4.0 Fortinet FortiWLM versions 8.4.2 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: A relative path traversal issue in Fortin...

PT-2023-29607 · Hewlett Packard +1 · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An authenticated Denial-of-Service DoS issue exists in the CLI service, allowing successful exploitation to interrupt the normal operation of the affected access point. Recommendations:...

PT-2023-29806 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Teacher Subject Allocation Management System version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands and obtain sensitive information. This is achieved via the searchdata parameter in the "index.php"...

PT-2023-29842 · Lionscripts.Com · Lionscripts.Com Webmaster Tools

Name of the Vulnerable Software and Affected Versions: LionScripts.Com Webmaster Tools versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

PT-2023-26387 · Ibm · Ibm Cics Tx Advanced

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Advanced version 10.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2023-35577 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash occurs in the following functions: parse by block type, light read record, and light...

PT-2023-23892 · Unknown · Brandbrilliance Post State Tags

Name of the Vulnerable Software and Affected Versions: BRANDbrilliance Post State Tags plugin versions 2.0.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-22252 · Plainware.Com · Shiftcontroller Employee Shift Scheduling

Name of the Vulnerable Software and Affected Versions: plainware.Com ShiftController Employee Shift Scheduling plugin versions = 4.9.23 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...

PT-2023-23898 · Unknown · Hyphenator

Name of the Vulnerable Software and Affected Versions: Hyphenator plugin versions = 5.1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the us...