PT-2023-27883 · Qumagie · Qumagie

Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.1.4 Description: A SQL injection issue has been reported, potentially allowing authenticated users to inject malicious code via a network. Recommendations: For versions prior to 2.1.4, update to QuMagie 2.1.4 or...

Vulnerabilities fixed in Foxit PDF Editor

Foxit has fixed vulnerabilities in PDF Editor for Mac formerly PhantomPDF. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or potentially execute arbitrary code execute arbitrary code within the context of the application and gain access to sensitive data within...

MGASA-2023-0314 Updated vim packages fix a security vulnerability

The updated packages fix a security vulnerability: Integer overflow in :history Ex-Command in Vim 9.0.2068...

SUSE-SU-2023:4412-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: - Update to SUSE Manager 4.3.9 Debian 12 support as client New Update Notification jscSUMA-111 Monitoring: Grafana upgraded to 9.5.8 Update 'saltkey' endpoints to accept GET instead of POST CVEs fixed: CVE-2023-34049 Bugs mentioned: bsc1204270, bsc1211047,...

PT-2023-23898 · Unknown · Hyphenator

Name of the Vulnerable Software and Affected Versions: Hyphenator plugin versions = 5.1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the us...

PT-2023-23256 · WordPress · Participants Database

Name of the Vulnerable Software and Affected Versions: Participants Database plugin versions = 2.4.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-23836 · WordPress · Sybre Waaijer Pro Mime Types

Name of the Vulnerable Software and Affected Versions: Sybre Waaijer Pro Mime Types – Manage file media types plugin versions = 1.0.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-24844 · Didier Stevens · Spamreferrerblock

Name of the Vulnerable Software and Affected Versions: Didier Sampaolo SpamReferrerBlock plugin versions = 2.22 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

PT-2023-24721 · Peter Shaw · Lh Password Changer Plugin

Name of the Vulnerable Software and Affected Versions: Peter Shaw LH Password Changer plugin versions = 1.55 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-32475 · Lanaccess · Lanaccess Onsafe Monitorhm

Name of the Vulnerable Software and Affected Versions: Lanaccess ONSAFE MonitorHM version 3.7.0 Description: An improper input validation issue has been found, which could allow a remote attacker to exploit the checkbox element and perform remote code execution, potentially compromising the entir...

PT-2023-9645 · Cisco · Cisco Industrial Ethernet 5000 +3

Name of the Vulnerable Software and Affected Versions: Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches affected versions not specified Description: The issue is related to the incorrect handling of IPv4 access control lists ACLs on switched virtual interfaces when an administrator...

PT-2023-14588 · Solwin Infotech · User Blocker

Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Blocker versions 1.5.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the User Blocker software. Recommendations: For versions 1.5.5 and...

PT-2023-14762 · WordPress · Icegram Express

Name of the Vulnerable Software and Affected Versions: Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce versions through 5.5.2 Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects Icegram Express...

PT-2023-28488 · Ipswitch · Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: WS FTP Server versions prior to 8.7.6 WS FTP Server versions prior to 8.8.4 Description: An issue has been identified in WS FTP Server where an authenticated Ad Hoc Transfer user can upload a file to a specified location on the underlying...

PT-2023-32029 · Puppet · Puppet Enterprise

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions prior to 2021.7.6 Puppet Enterprise versions prior to 2023.5 Description: The issue results in broken session management for SAML implementations. Recommendations: For versions prior to 2021.7.6, update to version...

ALSA-2023:6667 Moderate: samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version:...

JVN#29195731: EC-CUBE 3 series and 4 series vulnerable to arbitrary code execution

EC-CUBE 3 series and 4 series provided by EC-CUBE CO.,LTD. contain an arbitrary code execution vulnerability CWE-94 due to improper settings of the product's template engine "Twig". Impact Arbitrary code may be executed on the server where the product is running by a user with an administrative...

PT-2023-6926 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 12.4-RELEASE prior to 12.4-RELEASE-p7 FreeBSD versions 13.2-RELEASE prior to 13.2-RELEASE-p5 Description: The sflush stdio function in libc does not correctly update FILE objects' write space members for write-buffered stream...

CVE-2023-23369 QTS, Multimedia Console, and Media Streaming add-on

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.2 2023/05/04 and...

Low: vim

Issue Overview: The severity level was changed from Medium to Low. NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. CVE-2023-5441 Use After Free in GitHub repository vim/vim prior to v9.0.2010. CVE-2023-5535 Affected Packages: vim Issue...