PT-2023-5166 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: FortiClientEMS versions 7.0.0 through 7.0.4 FortiClientEMS versions 7.0.6 through 7.0.7 FortiClientEMS versions 6.4 and earlier FortiClientEMS versions 6.2 and earlier Description: The issue is related to an exposure of sensitive information ...

PT-2023-24725 · Unknown · Alan Tien Call Now Icon Animate

Name of the Vulnerable Software and Affected Versions: Alan Tien Call Now Icon Animate plugin versions 0.1.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. There is no information provided about...

PT-2023-21260 · Unknown · Mrdemonwolf Livestream Notice

Name of the Vulnerable Software and Affected Versions: MrDemonWolf Livestream Notice plugin versions 1.2.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the MrDemonWo...

PT-2023-24288 · WordPress · Woocommerce Returns/Warranty Requests

Name of the Vulnerable Software and Affected Versions: WooCommerce Returns and Warranty Requests plugin versions = 2.1.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

KLA52661 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Memor...

RHEL 8 : cups (RHSA-2023:4864)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4864 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups:...

PT-2023-23900 · Unknown · Weebotlite

Name of the Vulnerable Software and Affected Versions: weebotLite plugin versions prior to 1.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the weebotLite plugin. This vulnerability requires authentication with admin+ privileges...

Medium: haproxy

Issue Overview: HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind...

PT-2023-26745 · Unknown · Filemage Gateway

Name of the Vulnerable Software and Affected Versions: FileMage Gateway Windows Deployments versions 1.10.8 and before Description: The issue allows a remote attacker to obtain sensitive information via a crafted request to the "/mgmt/" component. This is a Directory Traversal vulnerability, whic...

PT-2023-4504 · Google +2 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in V8, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can potentially impact...

ASUSTOR ADM Multiple Vulnerabilities (AS-2023-009, AS-2023-010, AS-2023-011, AS-2023-012)

ASUSTOR ADM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:asustor:adm"; if description...

PT-2023-23615 · WordPress · Wppizza

Name of the Vulnerable Software and Affected Versions: WPPizza – A Restaurant Plugin plugin versions prior to 3.17.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...

PT-2023-20706 · Paul Kehrer · Updraft

Name of the Vulnerable Software and Affected Versions: Paul Kehrer Updraft plugin versions = 0.6.1 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal use...

PT-2023-25760 · Adm · Adm

Name of the Vulnerable Software and Affected Versions: ADM versions 4.0.6.RIS1 through 4.1.0 ADM versions 4.2.2.RI61 and below Description: The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and delete...

PT-2023-23821 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.5.0.x Description: The issue is an information disclosure vulnerability in the NFS component. A low-privileged attacker could potentially exploit this, leading to information disclosure...

Fedora: Security Advisory for java-11-openjdk (FEDORA-2023-e643a71e0f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-22972 · Unknown · Jonathan Daggerhart Query Wrangler

Name of the Vulnerable Software and Affected Versions: Jonathan Daggerhart Query Wrangler plugin versions 1.5.51 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-4463 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.96 Description: The issue is related to insufficient policy enforcement in the Extensions API of Google Chrome, allowing a remote attacker to install arbitrary extensions using a specially crafted HT...

PT-2023-22876 · Unknown · Hdcp Trustlet

Name of the Vulnerable Software and Affected Versions: HDCP trustlet versions prior to SMR Aug-2023 Release 1 Description: The issue is related to improper access control in the HDCP trustlet, allowing local attackers to execute arbitrary code. This could potentially lead to security breaches...

PT-2023-23876 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.1 Description: An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Recommendations: For versions prior to 6.4.1,...