SUSE-SU-2023:2233-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2023-24805: Fixed a remote code execution in the beh backend bsc1211340...

PT-2023-3357 · Abb · Abb Terra Ac Wallbox

Name of the Vulnerable Software and Affected Versions: ABB Terra AC wallbox UL40/80A versions 1.0;0 through 1.5.5 ABB Terra AC wallbox UL32A versions 1.0;0 through 1.6.5 ABB Terra AC wallbox CE Terra AC MID versions 1.0;0 through 1.6.5 ABB Terra AC wallbox CE Terra AC Juno CE versions 1.0;0 throu...

PT-2023-3358 · Jenkins · Jenkins Reverse Proxy Auth Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Reverse Proxy Auth Plugin versions 1.7.4 and earlier Description: The issue is related to a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to connect to an attacker-specified LDAP server using...

PT-2025-31040 · Unknown +1 · Buffered-Reader +1

Name of the Vulnerable Software and Affected Versions: buffered-reader crate versions prior to 1.1.5 buffered-reader crate versions prior to 1.2.0 Description: The buffered-reader crate for Rust contains a flaw that allows out-of-bounds array access and a panic. Recommendations: Update the...

PT-2023-19117 · WordPress · Rvola Wp Original Media Path

Name of the Vulnerable Software and Affected Versions: RVOLA WP Original Media Path plugin versions = 2.4.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated administrators. This vulnerability allows for malicious script execution on t...

PT-2023-18649 · WordPress · Propertyhive

Name of the Vulnerable Software and Affected Versions: PropertyHive plugin versions 1.5.48 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing th...

Beekeeper Studio vulnerable to code injection

Overview Beekeeper Studio provided by Beekeeper Studio, Inc. contains a code injection vulnerability CWE-74. Eiji Mori of Flatt Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A remote...

PT-2023-18630 · Tips Tricks Hq · Category Specific Rss Feed Subscription

Name of the Vulnerable Software and Affected Versions: Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin versions = v2.2 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileg...

PT-2023-3024 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Essential Addons for Elementor versions 5.4.0 through 5.7.1 Description: An improper authentication issue exists in Essential Addons for Elementor. Exploitation of this issue may allow a remote attacker to escalate their privileges. Real-worl...

CVE-2023-32080 Wings vulnerable to escape to host from installation container

Wings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impacts anyone running the affected versions of Wings. This vulnerability can be used to gain access to the host system running Wings if a user is able to...

PT-2023-14039 · Intel · Intel Qat Driver For Linux

Name of the Vulnerable Software and Affected Versions: Intel QAT Driver for Linux versions prior to 1.7.l.4.12 Description: The issue is related to improper buffer restriction in the software, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-19959 · Intel · Intel Server Board Bmc Firmware

Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to enable information disclosure via local access. Recommendations: For...

PT-2023-19209 · Unknown · Alex Moss Semalt Blocker

Name of the Vulnerable Software and Affected Versions: Alex Moss Semalt Blocker plugin versions prior to 1.1.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For Alex Moss Semalt...

PT-2023-21107 · Unknown · Everest Themes Viable Blog Theme

Name of the Vulnerable Software and Affected Versions: Everest themes Viable Blog theme versions = 1.1.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

PT-2023-13890 · Intel · Intel Dcm

Name of the Vulnerable Software and Affected Versions: IntelR DCM software versions prior to 5.0.1 Description: The issue concerns insufficiently protected credentials in the IntelR DCM software, which may allow an authenticated user to potentially enable information disclosure via network access...

PT-2023-13589 · Intel · Intel Nuc Software Studio Service

Name of the Vulnerable Software and Affected Versions: IntelR NUC Software Studio Service versions prior to 1.17.38.0 Description: The issue is related to insecure inherited permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2023-21142 · WordPress · Maui Marketing Update Image Tag Alt Attribute

Name of the Vulnerable Software and Affected Versions: Maui Marketing Update Image Tag Alt Attribute plugin versions = 2.4.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-19271 · Unknown · Flector Bbspoiler Plugin

Name of the Vulnerable Software and Affected Versions: Flector BBSpoiler plugin versions = 2.01 Description: A Stored Cross-Site Scripting XSS issue exists, allowing contributors and above to inject malicious scripts. Recommendations: For Flector BBSpoiler plugin versions = 2.01, update to a...

PT-2023-13995 · Intel · Intel Mc +1

Name of the Vulnerable Software and Affected Versions: IntelR EMA Configuration Tool versions prior to 1.0.4 IntelR MC versions prior to 2.4 Description: The issue is related to improper authorization, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-20152 · Intel · Intel Server Board Bmc Firmware

Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: The issue is related to improper buffer restrictions in the firmware, which may allow a privileged user to escalate privileges via local access. Recommendations: For version...