PT-2023-16115 · WordPress · Enable Media Replace

Name of the Vulnerable Software and Affected Versions: Enable Media Replace WordPress plugin versions prior to 4.0.2 Description: The issue allows authors to upload arbitrary files to the site, potentially enabling them to upload PHP shells on affected sites. Recommendations: For Enable Media...

PT-2023-35108 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: A memory leak issue was discovered in the Linux Kernel, specifically in the irqdomain.c file, related to the use of debugfs lookup. The actual impact and attack plausibility have not yet be...

PT-2023-35222 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.166 Description: The issue is related to a potential security problem in the cifs component, where an oops occurs due to an uncleared server-smbd conn in reconnect. The actual impact and attack plausibilit...

PT-2023-35083 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been fully determined...

PT-2023-35013 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential issue exists in the Linux Kernel, specifically in the sch taprio component of the net/sched module. The problem is related to a possible use-after-free scenario. The actual impact...

PT-2023-34975 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v6.1.8 Description: The issue is related to a use-after-free of a listening socket. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14 throu...

PT-2023-18218 · Unknown · One Hand Operation

Name of the Vulnerable Software and Affected Versions: One Hand Operation + versions prior to 6.1.21 Description: The issue allows multiple users to access the owner's widget without authorization via the gesture setting, due to a missing authorization vulnerability. Recommendations: For versions...

Design/Logic Flaw

Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There a...

PT-2023-14000 · Seosamba · Seosamba For Wordpress Webmasters

Name of the Vulnerable Software and Affected Versions: SeoSamba for WordPress Webmasters plugin versions 1.0.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-14600 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site Scripting XSS...

phpIPAM < 1.5.1 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

PT-2023-13489 · WordPress · Terawallet – For Woocommerce

Name of the Vulnerable Software and Affected Versions: TeraWallet – For WooCommerce plugin versions 1.3.24 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-20024 · World Wide Broadcast Network · Avideo

Name of the Vulnerable Software and Affected Versions: World Wide Broadcast Network AVideo versions prior to 12.4 Description: The issue allows attackers to execute arbitrary code via the video link field to the Embed a video link feature. An attacker could execute remote code on a system running...

PT-2023-13891 · WordPress · Wp Sunshine Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart plugin versions 2.9.13 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-1491 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2020 Update 4 and earlier, 2022 and earlier Description: The issue is related to an out-of-bounds write vulnerability in the memory buffer of Adobe FrameMaker, which could result in arbitrary code execution in the...

PT-2023-34915 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.304 Description: The issue concerns the xhci component of the Linux Kernel, where an endpoint is not checked for validity before being dereferenced. This could potentially lead to security vulnerabilities,...

PT-2023-34802 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: A bug was fixed in the Linux Kernel that occurs when unloading amdgpu. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34792 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the cleanup of partial engine discovery failures in the drm/i915/gt component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-34806 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the io uring/poll component. It was introduced in version v6.0 and fixed in version v6.1.7. The actual impact and attack plausibility have not yet been proven...

PT-2023-34741 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to a use after free condition on completion memory in the idxd dmaengine. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...