PT-2023-11515 · Ncurses +1 · Ncurses +1

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the fmt entry function, located in progs/dump entry.c:1116, which allows remote attackers to cause a denial of service via crafted commands...

PT-2023-4502 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to a use after free in the Loader component, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This could potentially impac...

PT-2023-4447

Name of the Vulnerable Software and Affected Versions Ivanti MobileIron Sentry versions 9.18.0 and below Description A security vulnerability in the MICS Admin Portal of Ivanti MobileIron Sentry may allow an attacker to bypass authentication controls on the administrative interface due to an...

CVE-2023-40168 Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop

TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only required user interaction is opening th...

PT-2023-4542 · Mcafee · Mcafee Safe Connect

Name of the Vulnerable Software and Affected Versions: McAfee Safe Connect versions prior to 2.16.1.126 Description: The issue is related to an uncontrolled search path element, which may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs. This can...

PT-2023-27178 · 1Panel · 1Panel

Name of the Vulnerable Software and Affected Versions: 1Panel versions 1.4.3 Description: An arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It that receives JSON data sent by users in the form o...

PT-2023-4677 · Unknown · Mxsecurity

Name of the Vulnerable Software and Affected Versions: MXsecurity versions prior to v1.0.1 Description: The issue is related to inadequate authentication measures in the MXSecurity platform, which can allow a remote attacker to gain unauthorized access to protected information. This can potential...

PT-2023-26475 · Unknown · Metersphere

Name of the Vulnerable Software and Affected Versions: MeterSphere versions prior to 2.10.4 LTS Description: MeterSphere is an open-source continuous testing platform. Some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively leaked by attacker...

PT-2023-4107 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to perform arbitrary read/write operations via a crafted HTML page. This could...

PT-2023-26345 · Trustwave +1 · Modsecurity +1

Name of the Vulnerable Software and Affected Versions: Trustwave ModSecurity versions 3.0.0 through 3.0.9 Description: The issue is related to Inefficient Algorithmic Complexity. Recommendations: For Trustwave ModSecurity versions 3.0.0 through 3.0.9, update to version 3.0.10 or later to resolve...

PT-2023-25122

Name of the Vulnerable Software and Affected Versions Infodrom Software E-Invoice Approval System versions prior to 20230701 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

CLSA-2023-1688674589 mysql: Fix of 21 CVEs

Update to MySQL 8.0.33 - CVEs fixed: CVE-2023-21980 CVE-2023-21947 CVE-2023-21940 CVE-2023-21976 CVE-2023-21933 CVE-2023-21911 CVE-2023-21945 CVE-2023-21966 CVE-2023-21982 CVE-2023-21946 CVE-2023-21963 CVE-2023-21913 CVE-2023-21955 CVE-2023-21962 CVE-2023-21977 CVE-2023-21953 CVE-2023-21972...

PT-2023-22875 · Google · Android

Name of the Vulnerable Software and Affected Versions: Calendar application versions prior to 12.4.07.15 Description: The issue allows attackers to write arbitrary files due to a potential zip path traversal vulnerability in the Calendar application. This vulnerability is present in Android 13...

PT-2023-4176 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a heap buffer overflow in the Visuals component of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

PT-2023-4059 · Siemens · Ruggedcom Rox Rx1500 +8

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.0 RUGGEDCOM ROX MX5000RE versions prior to V2.16.0 RUGGEDCOM ROX RX1400 versions prior to V2.16.0 RUGGEDCOM ROX RX1500 versions prior to V2.16.0 RUGGEDCOM ROX RX1501 versions prior to V2.16.0...

PT-2023-25668 · Inex · Ixpmanager

Name of the Vulnerable Software and Affected Versions: INEX IXP-Manager versions prior to 6.3.1 Description: The issue allows for XSS attacks. The following files may be affected: list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, overview.foil.php, cust.foil.php, and...

PT-2023-25295 · Ipswitch · Whatsup Gold

Name of the Vulnerable Software and Affected Versions: In Progress WhatsUp Gold versions prior to 23.0.0 Description: The issue is related to an SNMP-related application endpoint that failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary...

PT-2023-4039 · Siemens · Simatic Mv540 S +2

Name of the Vulnerable Software and Affected Versions: SIMATIC MV540 H versions prior to V3.3.4 SIMATIC MV540 S versions prior to V3.3.4 SIMATIC MV550 H versions prior to V3.3.4 SIMATIC MV550 S versions prior to V3.3.4 SIMATIC MV560 U versions prior to V3.3.4 SIMATIC MV560 X versions prior to...

PT-2023-24842 · WordPress · Kanban For Wordpress

Name of the Vulnerable Software and Affected Versions: Kanban for WordPress Kanban Boards for WordPress plugin versions prior to 2.5.21 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authentication bypass for admin+ users. Recommendations: For versions prior to...

PT-2023-23754 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS versions up to 6.62 Description: A critical issue was discovered, affecting unknown code. The manipulation of the username and password arguments with the input admin leads to the use of a hard-coded password. Recommendations: For OTCMS...