12590 matches found
PT-2023-22925 · Samsung · Samsung Health
Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.24.2.011 Description: The issue is related to improper input validation, allowing attackers to write arbitrary files with Samsung Health privilege. Recommendations: For versions prior to 6.24.2.011, update t...
PT-2023-28088 · Unknown · Neutron Smart Vms
Name of the Vulnerable Software and Affected Versions: Neutron Smart VMS versions prior to b1130.1.0.1 Description: The issue is an Authentication Bypass by Spoofing vulnerability in Neutron Smart VMS, allowing unauthorized access. Recommendations: For versions prior to b1130.1.0.1, update to a...
PT-2023-27153 · Unknown · Saasproject Booking Package
Name of the Vulnerable Software and Affected Versions: SAASPROJECT Booking Package plugin versions = 1.6.01 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...
PT-2023-5343 · Librey · Librey
Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit be59098abd119cda70b15bf3faac596dfd39a744 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files. This...
PT-2023-27314 · WordPress · Media From Ftp
Name of the Vulnerable Software and Affected Versions: Media from FTP WordPress plugin versions prior to 11.17 Description: The issue arises from the Media from FTP WordPress plugin not properly limiting who can use the plugin. This may allow users with author+ privileges to move files around, su...
PT-2023-4915 · Unknown · Super Store Finder
Name of the Vulnerable Software and Affected Versions: Super Store Finder version 3.6 Description: The issue is related to the use of hardcoded credentials in the Super Store Finder Google Maps API integration, allowing a remote attacker to gain access to the administration panel. A hardcoded...
PT-2023-25945 · Atarim · Atarim Plugin +1
Name of the Vulnerable Software and Affected Versions: Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin versions = 3.9.3 Description: The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with...
PT-2023-5254 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to a buffer over-read in the gpac repository. Specifically, the avi parse input file function in media tools/avilib.c at line 2083 is associated with a heap buffer overflow...
PT-2023-22723 · Solwin Infotech · Avartan Slider Lite
Name of the Vulnerable Software and Affected Versions: Solwin Infotech Responsive WordPress Slider – Avartan Slider Lite plugin versions = 1.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...
PT-2023-26460 · WordPress · Suitedash Direct Login
Name of the Vulnerable Software and Affected Versions: SuiteDash Direct Login plugin versions = 1.7.6 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into...
PT-2023-26494 · Realwebcare · Realwebcare Wrc Pricing Tables
Name of the Vulnerable Software and Affected Versions: Realwebcare WRC Pricing Tables plugin versions prior to 2.3.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Realwebcare WRC Pricing Tables plugin. This vulnerability requires...
PT-2023-25537 · Relic · Relic
Name of the Vulnerable Software and Affected Versions: RELIC versions before commit 421f2e91cf2ba42473d4d54daf24e295679e290e Description: The issue allows attackers to execute arbitrary code and cause a denial of service. This is due to an integer overflow vulnerability in the bn get prime...
PT-2023-26242 · WordPress · Dharmesh Patel Post List With Featured Image
Name of the Vulnerable Software and Affected Versions: Dharmesh Patel Post List With Featured Image plugin versions 1.2 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...
PT-2023-30363 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue concerns a floating point comparison with an incorrect operator in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to...
PT-2023-30268 · Public Knowledge · Pkp-Lib
Name of the Vulnerable Software and Affected Versions: pkp-lib versions prior to 3.3.0-16 Description: The issue concerns the use of a predictable algorithm in the random number generator. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve the issue...
CVE-2023-4650 Improper Access Control in instantsoft/icms2
Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
PT-2023-30049 · Instantsoft · Icms2
Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue concerns a session fixation problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...
PT-2023-5229 · Schweitzer Engineering Laboratories · Acselerator Bay Screen Builder
Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software versions prior to 1.0.49152.778 Description: The issue is related to an improper limitation of a pathname to a restricted directory, allowing relative path...
PT-2023-5318 · Acronis · Acronis Cloud Manager
Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to remote command execution due to improper input validation. This allows a remote attacker to execute arbitrary commands. Recommendations: For...