PT-2023-19890 · Cththemes · Cththemes Monolit Theme

Name of the Vulnerable Software and Affected Versions: Cththemes Monolit theme versions 2.0.6 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

PT-2023-20807 · Codefever · Codefever

Name of the Vulnerable Software and Affected Versions: codefever versions prior to 2023.2.7-commit-b1c2e7f Description: A remote code execution issue was found in the component /controllers/api/user.php, allowing for potential exploitation. Recommendations: For versions prior to...

PT-2023-19214 · Leonardo Giacone · Easy Panorama

Name of the Vulnerable Software and Affected Versions: Leonardo Giacone Easy Panorama plugin versions = 1.1.4 Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability allows an attacker to inject...

PT-2023-21957 · Cimatti · Cimatti Consulting Wordpress Contact Forms

Name of the Vulnerable Software and Affected Versions: Cimatti Consulting WordPress Contact Forms by Cimatti plugin versions 1.5.4 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts in...

PT-2023-19544 · Kiboko · Kiboko Labs Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Namaste! LMS plugin versions = 2.5.9.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Kiboko Labs Namaste! LMS plugin...

PT-2023-19351 · Unknown · Yannick Lefebvre Modal Dialog

Name of the Vulnerable Software and Affected Versions: Yannick Lefebvre Modal Dialog plugin versions = 3.5.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Yannick Lefebvre Modal Dialog...

PT-2023-19539 · Unknown · Codeat Glossary Plugin

Name of the Vulnerable Software and Affected Versions: Codeat Glossary plugin versions = 2.1.27 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. There is no...

PT-2023-21530 · Dell · Dell Emc Streaming Data Platform

Name of the Vulnerable Software and Affected Versions: Dell Streaming Data Platform versions prior to 1.4 Description: The issue allows a remote unauthenticated attacker to phish legitimate users, redirecting them to malicious websites. This can lead to information disclosure and the launch of...

PT-2023-17050 · Unknown · Securitycenter

Name of the Vulnerable Software and Affected Versions: Security Center version 5.11.2 Description: The issue is related to SQL Injection in the Hardware Inventory report. Recommendations: For Security Center version 5.11.2, update to a version that contains a fix for this issue...

SUSE SLES12 Security Update : flatpak (SUSE-SU-2023:1712-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1712-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8,...

PT-2023-21926 · Joomla · Anymailing Joomla Plugin

Name of the Vulnerable Software and Affected Versions: AnyMailing Joomla Plugin versions prior to 8.3.0 Description: The issue is related to missing access control in the AnyMailing Joomla Plugin, allowing unauthorized access to sensitive information and system files via path traversal. This occu...

PT-2023-20771 · Zijper · Zcbs +2

Name of the Vulnerable Software and Affected Versions: ZCBS Zijper Collectie Beheer Systeem ZCBS version 4.14k Zijper Publication Management System ZPBS version 4.14k Zijper Image Bank Management System ZBBS version 4.14k Description: The issue is related to Cross Site Scripting XSS, which is a...

PT-2023-17153 · Synopsys +1 · Coverity +1

Name of the Vulnerable Software and Affected Versions: Coverity versions prior to 2023.3.2 Description: The issue is related to forced browsing, which exposes authenticated resources to unauthorized actors due to an insecurely configured servlet mapping for the underlying Apache Tomcat server. Th...

PT-2023-15436 · Unknown · Quantumcloud Ai Chatbot Plugin

Name of the Vulnerable Software and Affected Versions: QuantumCloud AI ChatBot plugin versions prior to 4.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 4.3.0,...

PT-2023-13583 · WordPress +1 · Essential Plugin Popup Anything +1

Name of the Vulnerable Software and Affected Versions: WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin versions = 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user...

PT-2023-17168 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky versions up to 7.11.8 Description: A critical issue has been found, affecting the Installation Interface component, specifically the /install/index.php file. This issue leads to command injection and can be initiated remotely. The...

PT-2023-17046 · Robodk · Robodk

Name of the Vulnerable Software and Affected Versions: RoboDK versions 5.5.3 and prior Description: The issue is related to an insecure permission assignment to critical directories, which could allow a local user to escalate privileges and write files to the RoboDK process, achieving code...

PT-2023-18650 · WordPress · Wpsoul Greenshift

Name of the Vulnerable Software and Affected Versions: Wpsoul Greenshift – animation and page builder blocks plugin versions = 4.9.9 Description: The issue is related to an Authenticated Cross-Site Scripting XSS vulnerability. This means that an attacker who has authentication credentials for the...

PT-2023-16313 · WordPress · Wp Insurance

Name of the Vulnerable Software and Affected Versions: WP Insurance WordPress plugin versions prior to 2.1.4 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF...

PT-2023-21617 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A user may be able to cause a denial-of-service due to an issue that was addressed with improved state management. Recommendations: For versions prior to 13.3, update to macOS Ventura 13.3 to resolve...