PT-2023-28181 · Jenkins · Jenkins Aws Codecommit Trigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins AWS CodeCommit Trigger Plugin versions 3.0.12 and earlier Description: The issue arises from a lack of permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue. This can be exploited...

CVE-2023-39512

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

CVE-2023-39515 Stored Cross-site Scripting on data_debug.php datasource path view in Cacti

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti accounts an...

PT-2023-22930 · Unknown · Packageinstallerchn

Name of the Vulnerable Software and Affected Versions: PackageInstallerCHN versions prior to 13.1.03.00 Description: The issue allows a local attacker to access arbitrary files due to an intent redirection vulnerability. This vulnerability requires user interaction. Recommendations: For versions...

PT-2023-17690 · Salt +3 · Salt +3

Name of the Vulnerable Software and Affected Versions: Salt masters versions prior to 3005.2 Salt masters versions prior to 3006.2 Description: The issue concerns a denial-of-service DOS condition in minion return. When the request server receives several bad packets equal to the number of worker...

PT-2023-22926 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the GallerySearchProvider of Gallery, allowing an attacker to access search history. Recommendations: For versions prior to 14.5.01.2, update ...

PT-2023-22928 · Unknown · Gamelauncher

Name of the Vulnerable Software and Affected Versions: GameLauncher versions prior to 4.2.59.5 Description: The issue allows local attackers to access data through a PendingIntent hijacking vulnerability. Recommendations: For versions prior to 4.2.59.5, update to version 4.2.59.5 or later to...

PT-2023-10313 · Aruba · Aruba Airwave

Name of the Vulnerable Software and Affected Versions: Aruba AirWave versions 7.7.14.1 and earlier Aruba AirWave versions 8.0.6 and earlier Description: The issue allows remote OS command execution and file disclosure by administrative users through VisualRF. Recommendations: For Aruba AirWave...

PT-2023-26818 · Molongui · Molongui Author Box

Name of the Vulnerable Software and Affected Versions: Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin versions = 4.6.19 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject...

PT-2023-27193 · Unknown · Wsecure Lite

Name of the Vulnerable Software and Affected Versions: Ajay Lulia wSecure Lite plugin versions = 2.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...

PT-2023-27198 · Vcita · Vcita Online Booking & Scheduling Calendar

Name of the Vulnerable Software and Affected Versions: vCita.Com Online Booking & Scheduling Calendar for WordPress by vcita plugin versions = 4.3.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into...

PT-2023-25563 · WordPress · Jeffrey-Wp Media Library Categories

Name of the Vulnerable Software and Affected Versions: Jeffrey-WP Media Library Categories plugin versions = 2.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Jeffrey-WP Media Library Categories plugin. This vulnerability requires...

Design/Logic Flaw

In a typical Virtual Machine Monitor VMM there are several components, such as boot loader, virtual device drivers, virtio backend drivers and vhost drivers, that need to access the VM physical memory. The vm-memory rust crate provides a set of traits to decouple VM memory consumers from VM memor...

PT-2023-30294 · Instantsoft · Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git. Description: The issue allows for external control of system or configuration settings. Recommendations: For versions prior to 2.16.1-git, update to version 2.16.1-git or later to resolve the...

PT-2023-24630 · Unknown · Shopconstruct

Name of the Vulnerable Software and Affected Versions: ShopConstruct plugin versions 1.1.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the ShopConstruct plugin...

PT-2023-26239 · WordPress · Artem Abramovich Art Decoration Shortcode

Name of the Vulnerable Software and Affected Versions: Artem Abramovich Art Decoration Shortcode plugin versions 1.5.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher authentication levels. There is no...

PT-2023-5771 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 32047 Description: The issue is related to sensitive information disclosure due to missing authorization. This may allow an attacker to gain unauthorized access to protected information. Recommendations:...

PT-2023-30080 · Icms2 · Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of attack where an attacker injects malicious code into a website, and the website reflects the code back to...

PT-2023-30068 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository instantsoft/icms2. Recommendations: For versions prior to 2.16.1-git, update to version...

PT-2023-20073 · WordPress · Ian Sadovy Wordpress Tables Plugin

Name of the Vulnerable Software and Affected Versions: Ian Sadovy WordPress Tables plugin versions = 1.3.9 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website without proper authentication,...