PT-2023-33882 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A memory leak issue exists in the ath9k hif usb dealloc tx urbs function, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33159 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a use-after-free in the tun detach function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.17. Recommendations:...

PT-2023-6550 · WordPress · Quick Event Manager Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Quick Event Manager WordPress Plugin version prior to 9.7.5 Description: The issue is related to a reflected cross-site scripting vulnerability. It affects the category parameter of the qem ajax calendar action. This vulnerability can be...

PT-2023-14958 · WordPress · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce WordPress plugin versions prior to 2.8.9 Description: The issue is related to the Welcart e-Commerce WordPress plugin, where it does not validate and escape one of its shortcode attributes. This could allow users with a rol...

PT-2023-12874 · WordPress · Wp Spell Check

Name of the Vulnerable Software and Affected Versions: WP Spell Check versions prior to 9.13 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in multisite setups...

CVE-2023-22495 Izanami is vulnerable to Authorization Bypass

Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token JWT, an attacker cou...

PT-2023-14645 · WordPress · Betheme

Name of the Vulnerable Software and Affected Versions: Betheme theme version 26.6.1 and earlier Description: The issue is related to Broken Access Control in the Betheme theme on WordPress. Recommendations: For Betheme theme version 26.6.1 and earlier, update to a version later than 26.6.1 to...

PT-2023-16156 · Alf.Io · Alf.Io

Name of the Vulnerable Software and Affected Versions: Alf.io versions prior to 2.0-M4-2301 Description: The issue is related to Cross-site Scripting XSS - Stored, which was found in the GitHub repository alfio-event/alf.io. This type of issue allows an attacker to inject malicious scripts into a...

PT-2025-13328 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc6+ Description: A synchronization issue exists in the Linux kernel's fscache module. The freeing of a relinquished volume wakes up pending volume acquisition using wake up bit, but this is mismatched wit...

PT-2023-33047 · Dompurify · Dompurify

Name of the Vulnerable Software and Affected Versions: dompurify versions prior to 2.2.2 Description: The issue is related to cross-site scripting when converting from the SVG namespace. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

CVE-2022-38491

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks. Version 2022.1.133.0 corrects this issue...

PT-2023-1039 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30418 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 22.003.20282 and earlier Description: The issue is related to an out-of-bounds read vulnerability in...

PT-2023-1123 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.003.20282 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 20.005.30418 and earlier Description: The issue is related to the creation of temporary files in...

PT-2023-14436 · Bulutses Information Technologies · Bulutses Call Center System

Name of the Vulnerable Software and Affected Versions: Bulutses Information Technologies Call Center System versions prior to 3.0 Description: The issue is related to an unauthenticated Sql Injection vulnerability. This vulnerability has been fixed in version 3.0. Recommendations: For versions...

CVE-2022-38489

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting XSS. Version 2022.1.110.1.02 fixes the vulnerably...

PT-2023-1428 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 16.1.x beginning in 16.1.2.2 to before 16.1.3.3 BIG-IP versions 17.0.x before 17.0.0.2 Description: The issue is related to the implementation of the HTTP Profile configuration on a virtual server in BIG-IP, which can cause th...

PT-2023-14438 · WordPress · Mautic Integration For Woocommerce

Name of the Vulnerable Software and Affected Versions: Mautic Integration for WooCommerce WordPress plugin versions prior to 1.0.3 Description: The issue is related to a lack of proper CSRF check when updating settings, and the failure to ensure that the options to be updated belong to the plugin...

PT-2023-13349 · WordPress · Wptouch

Name of the Vulnerable Software and Affected Versions: WPtouch WordPress plugin versions prior to 4.3.45 Description: The issue allows high privilege users, such as admins, to upload arbitrary files on the server, even when they should not be allowed to, for example in a multisite setup. This is...

PT-2023-14239 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...