PT-2023-19895 · Rsvpmaker · Rsvpmaker

Name of the Vulnerable Software and Affected Versions: RSVPMaker versions through 9.9.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For versio...

PT-2023-27597 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin versions = 2.7.11.10 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For Groundhogg plugin versions =...

PT-2023-32383 · Thorsten · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.2.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into the application, potentially affecting users who access the compromise...

KLA61760 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Payments can be exploited to cause deni...

PT-2023-9367 · Apple +7 · Macos Sonoma +11

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 macOS Sonoma versions prior to 14.2 WebKitGTK affected versions not specified WPE WebKit affected versions not specified Description: The issue is related ...

PT-2023-32396 · Pkp-Lib · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to insufficient session expiration in the GitHub repository pkp/pkp-lib. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-3072)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-32103 · WordPress · Superb Slideshow Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Superb slideshow gallery plugin for WordPress versions up to, and including, 13.1 Description: The issue arises from insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the...

Mageia: Security Advisory (MGASA-2023-0303)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-29844 · WordPress · Conversios Track Google Analytics 4

Name of the Vulnerable Software and Affected Versions: Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin versions = 6.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an...

PT-2023-29829 · Arrow Plugins · The Awesome Feed – Custom Feed

Name of the Vulnerable Software and Affected Versions: The Awesome Feed – Custom Feed plugin versions 2.2.5 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-8914 · Grafana +1 · Grafana Worldmap Panel Plugin +1

Name of the Vulnerable Software and Affected Versions: Grafana WorldMap panel plugin versions prior to 1.0.4 Description: The issue is related to a DOM XSS vulnerability in the WorldMap panel plugin of the Grafana platform, which is caused by improper neutralization of input during webpage...

CMS Made Simple < 2.2.6 CSRF Vulnerability

CMS Made Simple is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2023-27457 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 Description: The issue was addressed with improved UI handling. A device may persistently fail to lock. Recommendations: For iOS versions prior to 17.1, update to iOS 17.1 to resolve th...

PT-2023-6544 · Jenkins · Jenkins Lambdatest-Automation Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins lambdatest-automation Plugin versions 1.20.10 and earlier Description: The issue is related to the exposure of information. It potentially allows a remote attacker to gain unauthorized access to protected information. The problem aris...

Advisory ROSA-SA-2023-2282

Software: dmidecode 3.5 WASP: ROSA-CHROME packageevrstring: dmidecode-3.5-2.src.rpm CVE-ID: CVE-2023-30630 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Dmidecode before version 3.5 allows -dump-bin to overwrite the local file. This has security implications because, for example, it is quite possible to...

PT-2023-19883 · Printfriendly · Print

Name of the Vulnerable Software and Affected Versions: Print, PDF, Email by PrintFriendly plugin versions = 5.5.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Print, PDF, Email by PrintFriendly plugin. This vulnerability requires...

PT-2023-29672 · Spider Teams · Spider Teams Applyonline

Name of the Vulnerable Software and Affected Versions: Spider Teams ApplyOnline – Application Form Builder and Manager plugin versions = 2.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...

PT-2023-29852 · Unknown · Parse Server

Name of the Vulnerable Software and Affected Versions: Parse Server versions prior to 5.5.6 Parse Server versions prior to 6.3.1 Description: Parse Server crashes when uploading a file without extension. This issue has been patched in versions 5.5.6 and 6.3.1. Recommendations: For versions prior ...

PT-2023-29890 · Unknown · Simple Calendar – Google Calendar Plugin

Name of the Vulnerable Software and Affected Versions: Simple Calendar – Google Calendar Plugin versions 3.2.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...