PT-2023-17156 · WordPress · Seopress

Name of the Vulnerable Software and Affected Versions: SEOPress WordPress plugin versions prior to 6.5.0.3 Description: The issue allows high-privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present, due to the unserialize of user input provided via the...

PT-2023-13451 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText BizManager versions prior to 16.6.0.1 Description: The issue arises from improper validation during the change-password operation, allowing any authenticated user to change the password of any other user, including the Administrator...

PT-2023-22514 · Magicjack · Magicjack A921 Usb Phone Jack

Name of the Vulnerable Software and Affected Versions: MagicJack A921 USB Phone Jack versions prior to Rev 3.0 V1.4 Description: The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access. Attackers can...

openSUSE 15 Security Update : stellarium (openSUSE-SU-2023:0097-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0097-1 advisory. - In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal...

PT-2023-21196 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.2.0-beta Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and later displays it, allowing attackers to...

PT-2023-22429 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.3 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...

PT-2023-20079 · WordPress · Wp-Insert

Name of the Vulnerable Software and Affected Versions: namithjawahar Wp-Insert plugin versions = 2.5.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 2.5.0, update to a versi...

PT-2023-20264 · Digitalblue · Digitalblue Click To Call/Chat Buttons Plugin

Name of the Vulnerable Software and Affected Versions: DIGITALBLUE Click to Call or Chat Buttons plugin versions 1.4.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects t...

PT-2023-14592 · WordPress · Softaculous Loginizer

Name of the Vulnerable Software and Affected Versions: Softaculous Loginizer plugin versions prior to 1.7.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-19566 · Unknown · Vryasage Marketing Performance

Name of the Vulnerable Software and Affected Versions: VryaSage Marketing Performance plugin versions prior to 2.0.0 Description: The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

PT-2023-14591 · Krishaweb · Krishaweb Add Multiple Marker Plugin

Name of the Vulnerable Software and Affected Versions: KrishaWeb Add Multiple Marker plugin versions = 1.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2023-21252 · Unknown · Ian Haycox Motor Racing League

Name of the Vulnerable Software and Affected Versions: Ian Haycox Motor Racing League plugin versions prior to 1.9.9 Description: The issue is related to an Authenticated admin+ Cross-Site Scripting XSS vulnerability. This means that an attacker who has administrative access to the system can...

PT-2023-22055 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R3-S11 Junos OS versions 20.2 prior to 20.2R3-S6 Junos OS versions 20.4 prior to 20.4R3-S5 Junos OS versions 21.1 prior to 21.1R3-S4 Junos OS versions 21.2 prior to...

PT-2023-22059 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.2R3-S7 Junos OS versions prior to 19.3R3-S8 Junos OS versions prior to 19.4R3-S12 Junos OS versions prior to 20.2R3-S8 Junos OS versions prior to 20.4R3-S7 Junos OS versions prior to 21.1R3-S5 Junos OS versions...

Important: kernel-livepatch-5.10.165-143.735

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

Important: kernel-livepatch-5.10.167-147.601

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

PT-2023-6439 · Adobe · Acrobat +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat Reader versions 20.005.30441 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability that could result i...

PT-2023-22156 · Sap · Sap Web Dispatcher +1

Name of the Vulnerable Software and Affected Versions: ABAP Platform versions 7.85 through 7.91 SAP Web Dispatcher versions 7.85 through 7.89 Description: The IP filter in ABAP Platform and SAP Web Dispatcher may be vulnerable due to erroneous IP netmask handling, potentially enabling access to...

ILIAS 6.24, 7.x < 7.20 Multiple Vulnerabilities

ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

Medium: ImageMagick

Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...