PT-2023-30495 · Fatcat Apps · Fatcat Apps Forms For Mailchimp

Name of the Vulnerable Software and Affected Versions: Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin versions = 2.5.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with editor or higher permissions. This ty...

PT-2023-23697 · Intel · Intel Nuc Uniwill Service Driver

Name of the Vulnerable Software and Affected Versions: IntelR NUC Uniwill Service Driver version 1.0.1.6 and earlier Description: The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path transversal in the IntelR NUC Uniwill Service Driver...

PT-2023-21683 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows - HW Version 2.0 versions prior to 2.0.4 Description: The issue is related to improper authorization in IntelR QAT drivers, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2023-13486 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools versions prior to iDmiEdit-Linux-5.27.06.0017 Description: The issue is related to improper access control in the IntelR Aptio V UEFI Firmware Integrator Tools, which may allow a privileged user t...

PT-2023-21184 · Intel · Intel(R) Server Information Retrieval Utility

Name of the Vulnerable Software and Affected Versions: IntelR Server Information Retrieval Utility versions prior to 16.0.9 Description: The issue is related to an uncontrolled search path element in the IntelR Server Information Retrieval Utility software. This may allow an authenticated user to...

Intel® OpenVINO™ Software Advisory

Summary: Potential security vulnerabilities in some Intel® OpenVINO™ software may allow denial of service, information disclosure. Intel is releasing sotfware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25080 Description: Protection mechanism failur...

Intel® Arc™ RGB Controller Software Advisory

Summary: A potential security vulnerability in some Intel® Arc™ RGB Controller software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32638 Description: Incorrect default permissions in some...

PT-2023-30492 · Themeum · Themeum Wp Crowdfunding Plugin

Name of the Vulnerable Software and Affected Versions: Themeum WP Crowdfunding plugin versions = 2.1.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially affecting...

Multiple vulnerabilities in Cisco Firepower Management Center Software

Overview Cisco Firepower Management Center Software provided by Cisco Systems contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-20219 Path traversal CWE-22 - CVE-2023-20220 Kentaro Kawane of LAC Co., Ltd. reported these vulnerabilitis to IPA. JPCERT/CC...

PT-2023-30571 · WordPress · Scribit Shortcodes Finder

Name of the Vulnerable Software and Affected Versions: Scribit Shortcodes Finder plugin versions = 1.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations: For Scribit Shortcodes Finder plugin versions = 1.5.3, update to a version higher than...

PT-2023-29904 · Unknown · Motors – Car Dealer

Name of the Vulnerable Software and Affected Versions: Motors – Car Dealer, Classifieds & Listing versions 1.4.6 and earlier Description: A Server-Side Request Forgery SSRF issue has been identified. This issue allows an attacker to forge requests from the server, potentially leading to...

PT-2023-14775 · Phonepe · Phonepe Payment Solutions

Name of the Vulnerable Software and Affected Versions: PhonePe Payment Solutions versions 1.0.0 through 1.0.15 Description: A Server-Side Request Forgery SSRF issue affects PhonePe Payment Solutions. This issue allows for potential unauthorized access to internal systems. Recommendations: For...

PT-2023-30123 · WordPress · Daext Autolinks Manager

Name of the Vulnerable Software and Affected Versions: DAEXT Autolinks Manager plugin versions = 1.10.04 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-30572 · Woocommerce · Gravity Master Product Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: Gravity Master Product Enquiry for WooCommerce plugin versions = 3.0 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be stored on the server and executed when...

MGASA-2023-0316 Updated vorbis-tools packages fix a security vulnerability

The upstream patch to fix CVE-2023-43361 was added...

PT-2023-21133 · Meril · Meril Inc. Blog Floating Button Plugin

Name of the Vulnerable Software and Affected Versions: Meril Inc. Blog Floating Button plugin versions = 1.4.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-22252 · Plainware.Com · Shiftcontroller Employee Shift Scheduling

Name of the Vulnerable Software and Affected Versions: plainware.Com ShiftController Employee Shift Scheduling plugin versions = 4.9.23 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...

PT-2023-21608 · WordPress · Wp Amaps

Name of the Vulnerable Software and Affected Versions: WP MAPS formerly WP Google Map Plugin versions = 4.4.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

HOTELDRUID vulnerable to cross-site scripting

Overview HOTELDRUID provided by DigitalDruid.Net contains a cross-site scripting vulnerability CWE-79. Tomoro Taniguchi of FiveDrive, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script...

JVN#99177549: HOTELDRUID vulnerable to cross-site scripting

HOTELDRUID provided by DigitalDruid.Net contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the product. Solution Update the software Update the software according to the information provided by the...