PT-2023-21994

Name of the Vulnerable Software and Affected Versions CBOT Chatbot versions prior to Core: v4.0.3.4 CBOT Chatbot versions prior to Panel: v4.0.3.7 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing for Authentication Abuse and...

PT-2023-15057 · Unknown · Kodex Posts Likes Plugin

Name of the Vulnerable Software and Affected Versions: Kodex Posts likes plugin versions = 2.4.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-23342 · Mitel · Mivoice Connect

Name of the Vulnerable Software and Affected Versions: MiVoice Connect versions 9.6.2208.101 and earlier Description: A vulnerability in the Connect Mobility Router component could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficie...

PT-2023-12628 · Bitdefender · Bitdefender Antivirus Plus +2

Name of the Vulnerable Software and Affected Versions: Bitdefender Total Security versions prior to 26.0.10.45 Bitdefender Internet Security versions prior to 26.0.10.45 Bitdefender Antivirus Plus versions prior to 26.0.10.45 Description: The issue is related to an Unquoted Search Path or Element...

Medium: git

Issue Overview: Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to git apply --reject, a path outside the working tree can be overwritten with partially controlled...

PT-2023-21697 · Unknown · Mw Wp Form

Name of the Vulnerable Software and Affected Versions: MW WP Form versions v4.4.2 and earlier Description: The issue allows a remote unauthenticated attacker to upload an arbitrary file due to an unrestricted upload of files with dangerous types. This may lead to potential security risks...

PT-2023-21730 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: cloudexplorer-lite versions prior to v1.1.0 Description: The issue is related to improper access control in the cloudexplorer-lite GitHub repository. Recommendations: For versions prior to v1.1.0, update to version v1.1.0 or later to resolve...

PT-2023-21188 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10 Description: A buffer overflow vulnerability in the multiple setting pages of SolarView Compact allows a remote authenticated...

MyBB < 1.8.34 XSS Vulnerability

MyBB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

PT-2023-20090 · WordPress · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher plugin versions = 3.8.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-19144 · WordPress · Hm Plugin Wordpress Books Gallery

Name of the Vulnerable Software and Affected Versions: HM Plugin WordPress Books Gallery plugin versions = 4.4.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-24276 · Unknown +1 · Bitcoin Core +1

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 24.1 Description: The issue allows attackers to cause a denial of service, specifically CPU consumption, because draining the inventory-to-send queue is inefficient. This has been exploited in the wild in May...

PT-2023-23893 · WordPress · Pingonline Dyslexiefont Free

Name of the Vulnerable Software and Affected Versions: PingOnline Dyslexiefont Free plugin versions = 1.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

Design/Logic Flaw

Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension may lead to Remote Code Execution. If the name parameter value is not empty string'' in the View.php's doesTemplateExist - resolveTemplate - resolveTemplateInternal -...

PT-2023-23401 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad version 5.4.0 Description: An issue in the software allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existin...

PT-2023-21112 · Ramon Fincken · Ramon Fincken Auto Prune Posts Plugin

Name of the Vulnerable Software and Affected Versions: Ramon Fincken Auto Prune Posts plugin versions = 1.8.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

HPESBUX04475 rev.1 - HPE HP-UX Using OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Denial of Service DoS, Buffer Overflow; Remote: Bypass Security Restrictions, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX OpenSSL Software prior to A.01.01.01t.001 CVSS...

Collabora CODE / Collabora Online < 6.4.27, 21.x < 21.11.9, 22.x < 22.05.13 XSS Vulnerability

Collabora CODE Collabora Online Development Edition and Collabora Online are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2023-19099 · WordPress · Wpmanage Uji Popup

Name of the Vulnerable Software and Affected Versions: WPmanage Uji Popup plugin versions 1.4.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or those with higher authentication levels. There i...

Medium: kernel

Issue Overview: bpf: incorrect verifier pruning due to missing register precision taints, which may lead to out-of-band read/write access due to an incorrect verifier conclusion. CVE-2023-2163 qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write...