PT-2023-6766 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo printers affected versions not specified Description: A remote code execution issue was found in the firmware used in some Lenovo printers. This can be caused by a remote user sending an illegal string to the server-side interface via ...

PT-2023-29258 · Unknown · Leave Management System Project

Name of the Vulnerable Software and Affected Versions: Leave Management System Project version 1.0 Description: The issue concerns multiple Authenticated SQL Injection vulnerabilities. Specifically, the setcasualleave parameter of the "admin/setleaves.php" resource does not validate the character...

PT-2023-29180 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The lnm parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the...

PT-2023-30031 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Best Courier Management System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the change username field. This allows for potential malicious script injection, affecting the security of the system...

PT-2023-29462 · Google · Android Client

Name of the Vulnerable Software and Affected Versions: Android Client affected versions not specified Description: The Android Client application uses the HTTP protocol to retrieve sensitive information, including IP addresses and credentials to connect to a remote MQTT broker entity, instead of...

PT-2023-29902 · WordPress · Jeff Sherk Auto Login New User After Registration

Name of the Vulnerable Software and Affected Versions: Jeff Sherk Auto Login New User After Registration plugin versions = 1.9.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-29683 · Fastwpspeed · Fast Wp Speed

Name of the Vulnerable Software and Affected Versions: Fastwpspeed Fast WP Speed plugin version 1.0.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites, potentially leading to unauthoriz...

PT-2023-28806 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the Top Directory parameter in the File Picker Menu component. This enables the attacker to injec...

PT-2023-29292 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.4.59197 Description: A Cross-Site Scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. This enables the attacker to potentially perform unauthorized...

PT-2023-12108 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector Installer and Uninstallers for Windows versions prior to 3.6 Description: The issue is related to an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges...

PT-2023-29813 · Wbce Cms · Wbce Cms

Name of the Vulnerable Software and Affected Versions: WBCE CMS versions 1.6.1 and earlier Description: A Cross Site Scripting XSS issue allows a remote attacker to escalate privileges via a crafted script to the website footer parameter in the "admin/settings/save.php" component. Recommendations...

PT-2023-7181 · Ibm · Ibm Cognos Dashboards On Cloud Pak For Data

Name of the Vulnerable Software and Affected Versions: IBM Cognos Dashboards on Cloud Pak for Data version 4.7.0 Description: The issue is caused by a reverse tabnabbing flaw, which could allow a remote attacker to bypass security restrictions. An attacker could exploit this and redirect a victim...

PT-2023-26330 · Unknown · Superwebmailer

Name of the Vulnerable Software and Affected Versions: SuperWebMailer version 9.00.0.01710 Description: An issue was discovered that allows for XSS via a GET parameter in the keepalive.php file. Recommendations: For SuperWebMailer version 9.00.0.01710, consider restricting access to the...

PT-2023-12753 · WordPress · Imagemagick Engine

Name of the Vulnerable Software and Affected Versions: ImageMagick Engine plugin for WordPress versions up to, and including 1.7.5 Description: The issue allows for remote code execution via the cli path parameter. This enables unauthenticated users to run arbitrary commands, potentially leading ...

PT-2023-31205 · WordPress · Bear

Name of the Vulnerable Software and Affected Versions: The BEAR for WordPress versions up to, and including, 1.1.3.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe bulkoperations swap function. This allows unauthenticated...

PT-2023-14066 · Tinylab · Tinylab Linux-Lab +1

Name of the Vulnerable Software and Affected Versions: TinyLab linux-lab version 1.1-rc1 TinyLab cloud-lab version 0.8-rc2 Description: The default configuration of TinyLab linux-lab and cloud-lab could cause Container Escape due to insecure permissions. Recommendations: For TinyLab linux-lab...

PT-2023-6299 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0 through 7.0.0.0.0 Description: The issue is related to insufficient input validation in the Pod Admin component. It allows a low-privileged attacker with network access via HT...

PT-2023-9835 · Apache · Apache Spark +1

Name of the Vulnerable Software and Affected Versions: Apache Hive versions 1.2.0 and later Apache Spark versions 2.0.0 and later Description: The issue is related to the exposure of digital signatures in cookie data, which can lead to security vulnerabilities and exploitation. The vulnerable...

PT-2023-12691 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: IBM Security Verify Privilege On-Premises could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...

PT-2023-25753 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ versions V5.2cu.7594 B20200910 and before Description: The issue is related to command injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...