PT-2023-29331 · Cytech · Cytech Buddymeet Plugin

Name of the Vulnerable Software and Affected Versions: Cytech BuddyMeet plugin versions = 2.2.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can then be execute...

PT-2023-29626 · Unknown · Fla-Shop.Com Html5 Maps

Name of the Vulnerable Software and Affected Versions: Fla-shop.Com HTML5 Maps plugin versions = 1.7.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-28703 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 31.7.2 Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Description: A Cross Site Request Forgery CSRF issue in the Chalet application allows attackers to run arbitrary code...

PT-2023-29330 · Robin Wilson · Bbp Style Pack Plugin

Name of the Vulnerable Software and Affected Versions: Robin Wilson bbp style pack plugin versions 5.6.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or those with higher authentication levels...

PT-2023-29618 · Unknown · Caret Country Access Limit

Name of the Vulnerable Software and Affected Versions: Caret Country Access Limit plugin versions prior to 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application...

PT-2023-29476 · WordPress · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System plugin versions = 2.9.9.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

PT-2023-29474 · Unknown · Hitsteps Web Analytics

Name of the Vulnerable Software and Affected Versions: Hitsteps Web Analytics plugin versions = 5.86 Description: A Cross-Site Request Forgery CSRF issue affects the Hitsteps Web Analytics plugin. This type of issue allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-6309 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S8-EVO Juniper Networks Junos OS Evolved version 21.1R1-EVO and later Juniper Networks Junos OS Evolved versions prior to 21.2R3-S6-EVO Juniper Networks Junos OS Evolved version...

Lenovo System Update Vulnerability - Lenovo Support US

No description provided...

PT-2023-29033

Name of the Vulnerable Software and Affected Versions Macrium Reflect versions 8.1.7544 and below Description A buffer overflow in Macrium Reflect allows attackers to escalate privileges or execute arbitrary code. Recommendations For Macrium Reflect versions 8.1.7544 and below, update to a versio...

PT-2023-28070 · WordPress · Sendpress Newsletters

Name of the Vulnerable Software and Affected Versions: SendPress Newsletters plugin versions 1.22.3.31 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

PT-2023-29171 · WordPress · Hometory Mang Board Wp

Name of the Vulnerable Software and Affected Versions: Hometory Mang Board WP plugin versions 1.7.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

PT-2023-29172 · Mediavine · Mediavine Control Panel

Name of the Vulnerable Software and Affected Versions: Mediavine Mediavine Control Panel plugin versions = 2.10.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the use...

PT-2023-5970 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in Fullscreen mode, allowing an attacker to bypass navigation restrictions via a crafted Chrome Extension if a user is convince...

PT-2023-28120 · Softaculous · Wpcentral

Name of the Vulnerable Software and Affected Versions: Softaculous Ltd. WpCentral plugin versions = 1.5.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-6540 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.117 Microsoft Edge versions prior to 118.0.5993.117 Description: The issue is related to a use after free in the Profiles component, which can be exploited by a remote attacker using a crafted HTML...

Fedora 37 : libspf2 (2023-ae340c92ea)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ae340c92ea advisory. Patch CVE-2023-42118, plus some other fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

QNAP QTS Multiple Vulnerabilities (QSA-23-37)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

PT-2023-21136 · Makestories Team · Makestories

Name of the Vulnerable Software and Affected Versions: MakeStories Team MakeStories for Google Web Stories plugin versions = 2.8.0 Description: A Cross-Site Request Forgery CSRF issue affects the MakeStories Team MakeStories plugin. This type of issue allows an attacker to trick a user into...

PT-2023-5794 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 35739 Description: The issue is related to sensitive information disclosure due to missing authorization. This could allow an attacker to gain unauthorized access to protected information. The products...