PT-2023-13967 · Opentext · Opentext Archive Center Administration

Name of the Vulnerable Software and Affected Versions: OpenText Archive Center Administration versions prior to 21.3 Description: The issue allows XXE attacks, where authenticated users could upload XML files that are not sufficiently validated, potentially leading to data exfiltration or localiz...

PT-2023-19147 · Themeisle · Themeisle Visualizer

Name of the Vulnerable Software and Affected Versions: Themeisle Visualizer: Tables and Charts Manager for WordPress plugin versions = 3.9.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with...

PT-2023-16188 · WordPress · Wp Shamsi

Name of the Vulnerable Software and Affected Versions: WP Shamsi WordPress plugin versions 4.3.3 and earlier Description: The issue concerns CSRF and broken access control vulnerabilities. These vulnerabilities allow a user with a role as low as a subscriber to delete attachments. Recommendations...

PT-2023-12231

Name of the Vulnerable Software and Affected Versions Plex media server versions 1.21 and earlier Description The issue concerns a ddos reflection attack that can be launched via the plex service. Recommendations For Plex media server versions 1.21 and earlier, update to a version later than 1.21...

PT-2022-26935 · Woocommerce · Advanced Coupons For Woocommerce Coupons

Name of the Vulnerable Software and Affected Versions: Advanced Coupons for WooCommerce Coupons plugin version 4.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to notice dismissal. Recommendations: For Advanced Coupons for...

PT-2022-24230 · WordPress · Analytify

Name of the Vulnerable Software and Affected Versions: Analytify plugin versions = 4.2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...

PT-2022-5165 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.30 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with logon to the infrastructure where MySQL...

PT-2022-10596 · WordPress · Asset Cleanup: Page Speed Booster

Name of the Vulnerable Software and Affected Versions: Asset CleanUp: Page Speed Booster plugin versions = 1.3.8.4 Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into...

PT-2022-21940 · WordPress · Biplob018 Shortcode Addons

Name of the Vulnerable Software and Affected Versions: Biplob018 Shortcode Addons plugin versions 3.1.2 and earlier Description: The issue allows authenticated options change in the Biplob018 Shortcode Addons plugin at WordPress. Recommendations: For Biplob018 Shortcode Addons plugin versions 3.1...

PT-2022-22070 · Jenkins · Jenkins Convertigo Mobile Platform Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Convertigo Mobile Platform Plugin versions 1.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins Convertigo Mobile Platform Plugin versio...

PT-2022-18106 · Dell · Dell Openmanage Enterprise

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions 3.8.3 and prior Description: The issue is related to an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass...

PT-2022-19383 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Mask Passwords Plugin versions 3.0 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which is exploitable by attackers with Item/Configure permission. This occurs because the plugin does no...

PT-2022-18287 · Jenkins · Jenkins Folder-Based Authorization Strategy Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Folder-based Authorization Strategy Plugin versions 1.3 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because the names of roles shown on the configuration form are not...

PT-2022-1450 · Adobe · Acrobat 2020 +2

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 17.011.30204 through 21.007.20099 Adobe Acrobat 2017 affected versions not specified Adobe Acrobat 2020 affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability...

PT-2021-5970 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 22.0 and earlier Adobe After Effects versions 18.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe After Effects, which could lead to disclosure of sensitive memory...

PT-2021-21034 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.26 and prior Description: A vulnerability in the MySQL Server product allows a highly privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in the...

PT-2021-11080 · Unknown · Krpano Panorama Viewer

Name of the Vulnerable Software and Affected Versions: Krpano Panorama Viewer versions =1.20.8 Description: The issue is related to Reflected XSS due to insecure remote js load in the file viewer/krpano.html. The plugintest.url parameter is vulnerable. Recommendations: For Krpano Panorama Viewer...

PT-2019-6386 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 2019.021.20056 and earlier Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 Description: The issue is related to a use-after-free vulnerability that could result in...

PT-2019-16525 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...

PT-2019-6459 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.1.5 Description: An issue was discovered in the ip ra control function in the net/ipv4/ip sockglue.c component of the Linux kernel. This issue is related to errors in pointer dereferencing, which might allow an...