PT-2023-20264 · Digitalblue · Digitalblue Click To Call/Chat Buttons Plugin

Name of the Vulnerable Software and Affected Versions: DIGITALBLUE Click to Call or Chat Buttons plugin versions 1.4.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects t...

PT-2023-14592 · WordPress · Softaculous Loginizer

Name of the Vulnerable Software and Affected Versions: Softaculous Loginizer plugin versions prior to 1.7.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-14591 · Krishaweb · Krishaweb Add Multiple Marker Plugin

Name of the Vulnerable Software and Affected Versions: KrishaWeb Add Multiple Marker plugin versions = 1.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2023-19566 · Unknown · Vryasage Marketing Performance

Name of the Vulnerable Software and Affected Versions: VryaSage Marketing Performance plugin versions prior to 2.0.0 Description: The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

PT-2023-21252 · Unknown · Ian Haycox Motor Racing League

Name of the Vulnerable Software and Affected Versions: Ian Haycox Motor Racing League plugin versions prior to 1.9.9 Description: The issue is related to an Authenticated admin+ Cross-Site Scripting XSS vulnerability. This means that an attacker who has administrative access to the system can...

PT-2023-22055 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R3-S11 Junos OS versions 20.2 prior to 20.2R3-S6 Junos OS versions 20.4 prior to 20.4R3-S5 Junos OS versions 21.1 prior to 21.1R3-S4 Junos OS versions 21.2 prior to...

Important: kernel-livepatch-5.10.167-147.601

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

Important: kernel-livepatch-5.10.165-143.735

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

PT-2023-22059 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.2R3-S7 Junos OS versions prior to 19.3R3-S8 Junos OS versions prior to 19.4R3-S12 Junos OS versions prior to 20.2R3-S8 Junos OS versions prior to 20.4R3-S7 Junos OS versions prior to 21.1R3-S5 Junos OS versions...

PT-2023-6439 · Adobe · Acrobat +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat Reader versions 20.005.30441 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to a use-after-free vulnerability that could result i...

PT-2023-22156 · Sap · Sap Web Dispatcher +1

Name of the Vulnerable Software and Affected Versions: ABAP Platform versions 7.85 through 7.91 SAP Web Dispatcher versions 7.85 through 7.89 Description: The IP filter in ABAP Platform and SAP Web Dispatcher may be vulnerable due to erroneous IP netmask handling, potentially enabling access to...

ILIAS 6.24, 7.x < 7.20 Multiple Vulnerabilities

ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

Medium: ImageMagick

Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...

PT-2023-19890 · Cththemes · Cththemes Monolit Theme

Name of the Vulnerable Software and Affected Versions: Cththemes Monolit theme versions 2.0.6 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

PT-2023-20807 · Codefever · Codefever

Name of the Vulnerable Software and Affected Versions: codefever versions prior to 2023.2.7-commit-b1c2e7f Description: A remote code execution issue was found in the component /controllers/api/user.php, allowing for potential exploitation. Recommendations: For versions prior to...

PT-2023-19214 · Leonardo Giacone · Easy Panorama

Name of the Vulnerable Software and Affected Versions: Leonardo Giacone Easy Panorama plugin versions = 1.1.4 Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability allows an attacker to inject...

PT-2023-21957 · Cimatti · Cimatti Consulting Wordpress Contact Forms

Name of the Vulnerable Software and Affected Versions: Cimatti Consulting WordPress Contact Forms by Cimatti plugin versions 1.5.4 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts in...

PT-2023-19544 · Kiboko · Kiboko Labs Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Namaste! LMS plugin versions = 2.5.9.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Kiboko Labs Namaste! LMS plugin...

PT-2023-19351 · Unknown · Yannick Lefebvre Modal Dialog

Name of the Vulnerable Software and Affected Versions: Yannick Lefebvre Modal Dialog plugin versions = 3.5.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Yannick Lefebvre Modal Dialog...

PT-2023-19539 · Unknown · Codeat Glossary Plugin

Name of the Vulnerable Software and Affected Versions: Codeat Glossary plugin versions = 2.1.27 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. There is no...