PT-2023-21530 · Dell · Dell Emc Streaming Data Platform

Name of the Vulnerable Software and Affected Versions: Dell Streaming Data Platform versions prior to 1.4 Description: The issue allows a remote unauthenticated attacker to phish legitimate users, redirecting them to malicious websites. This can lead to information disclosure and the launch of...

PT-2023-17050 · Unknown · Securitycenter

Name of the Vulnerable Software and Affected Versions: Security Center version 5.11.2 Description: The issue is related to SQL Injection in the Hardware Inventory report. Recommendations: For Security Center version 5.11.2, update to a version that contains a fix for this issue...

SUSE SLES12 Security Update : flatpak (SUSE-SU-2023:1712-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1712-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8,...

PT-2023-21926 · Joomla · Anymailing Joomla Plugin

Name of the Vulnerable Software and Affected Versions: AnyMailing Joomla Plugin versions prior to 8.3.0 Description: The issue is related to missing access control in the AnyMailing Joomla Plugin, allowing unauthorized access to sensitive information and system files via path traversal. This occu...

PT-2023-20771 · Zijper · Zcbs +2

Name of the Vulnerable Software and Affected Versions: ZCBS Zijper Collectie Beheer Systeem ZCBS version 4.14k Zijper Publication Management System ZPBS version 4.14k Zijper Image Bank Management System ZBBS version 4.14k Description: The issue is related to Cross Site Scripting XSS, which is a...

PT-2023-15436 · Unknown · Quantumcloud Ai Chatbot Plugin

Name of the Vulnerable Software and Affected Versions: QuantumCloud AI ChatBot plugin versions prior to 4.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 4.3.0,...

PT-2023-17153 · Synopsys +1 · Coverity +1

Name of the Vulnerable Software and Affected Versions: Coverity versions prior to 2023.3.2 Description: The issue is related to forced browsing, which exposes authenticated resources to unauthorized actors due to an insecurely configured servlet mapping for the underlying Apache Tomcat server. Th...

PT-2023-13583 · WordPress +1 · Essential Plugin Popup Anything +1

Name of the Vulnerable Software and Affected Versions: WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin versions = 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user...

PT-2023-17168 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky versions up to 7.11.8 Description: A critical issue has been found, affecting the Installation Interface component, specifically the /install/index.php file. This issue leads to command injection and can be initiated remotely. The...

PT-2023-17046 · Robodk · Robodk

Name of the Vulnerable Software and Affected Versions: RoboDK versions 5.5.3 and prior Description: The issue is related to an insecure permission assignment to critical directories, which could allow a local user to escalate privileges and write files to the RoboDK process, achieving code...

PT-2023-18650 · WordPress · Wpsoul Greenshift

Name of the Vulnerable Software and Affected Versions: Wpsoul Greenshift – animation and page builder blocks plugin versions = 4.9.9 Description: The issue is related to an Authenticated Cross-Site Scripting XSS vulnerability. This means that an attacker who has authentication credentials for the...

PT-2023-21617 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A user may be able to cause a denial-of-service due to an issue that was addressed with improved state management. Recommendations: For versions prior to 13.3, update to macOS Ventura 13.3 to resolve...

PT-2023-15071 · Unknown · Woocommerce Vietnam Checkout

Name of the Vulnerable Software and Affected Versions: Le Van Toan Woocommerce Vietnam Checkout plugin versions prior to 2.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2023-16313 · WordPress · Wp Insurance

Name of the Vulnerable Software and Affected Versions: WP Insurance WordPress plugin versions prior to 2.1.4 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF...

cifar-10-model (=7.4.0), gamornet-cpu (>=0.2.3 <=0.4.3) +8 more potentially affected by CVE-2023-27579 via tensorflow-cpu (>=1.15.0 <=2.11.0)

tensorflow-cpu PYPI version =1.15.0, =0.2.3, =0.0.5, =1.0.0, =1.8.2, =0.1.3, =0.3.0.dev221212, =0.7.0, =0.7.5 Source cves: CVE-2023-27579 Source advisory: OSV:GHSA-5W96-866F-6RM8...

PT-2023-18858 · Dek-1705 · Dek-1705

Name of the Vulnerable Software and Affected Versions: DEK-1705 version 34.23.1 and earlier Description: A command execution issue was discovered in the device. Recommendations: For DEK-1705 version 34.23.1 and earlier, update to a version later than 34.23.1 to resolve the issue...

PT-2023-17799 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a missing bounds check in the p2p iface.cpp file, which could lead to an out of bounds read. This might result in local information disclosure, requiring System executi...

PT-2023-20227

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1 Description The issue is related to a floating point exception in the AudioSpectrogram function. The exception occurs when the stride is set to 0. This can be exploited by passing a stride value o...

PT-2023-21709 · Magepeople · Magepeople Team Event Manager/Tickets Selling Plugin For Woocommerce

Name of the Vulnerable Software and Affected Versions: MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce versions 3.8.6 and earlier Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability that requires authentication with admin+ privileges. This...

Low: libsolv

Issue Overview: A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-3200 Affected Packages: libsolv Issue Correction: Run dnf update libsolv --releasever 2023.0.20230322 or dnf...