PT-2023-28051 · WordPress · Mycryptocheckout

Name of the Vulnerable Software and Affected Versions: edward plainview MyCryptoCheckout plugin versions = 2.125 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-26815 · Woocommerce · Thedotstore Banner Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: theDotstore Banner Management For WooCommerce plugin versions = 2.4.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

PT-2023-26819 · Fetch Designs · Fetch Designs Sign-Up Sheets Plugin

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets plugin versions = 2.2.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

PT-2023-22936 · Unknown · Hdcp Trustlet

Name of the Vulnerable Software and Affected Versions: HDCP trustlet versions prior to SMR Oct-2023 Release 1 Description: The issue is a stack-based buffer overflow that allows local privileged attackers to perform code execution. This can be exploited by attackers to execute malicious code...

PT-2023-9128 · Qnap · Quts Hero +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.4.2596 build 20231128 QuTS hero versions prior to h5.1.4.2596 build 20231128 Description: The issue is related to a buffer copy without checking the size of the input, which can lead to a buffer overflow in memory...

Low: containerd

Issue Overview: No CVE associated with this advisory Affected Packages: containerd Issue Correction: Run dnf update containerd --releasever 2023.2.20231002 or dnf update --advisory ALAS2023-2023-374 --releasever 2023.2.20231002 to update your system. More information on how to update your system...

PT-2023-29155 · Unknown · Gopi Ramasamy Popup Contact Form Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Popup contact form plugin versions prior to 7.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication with admin or higher privileges. Recommendations: F...

PT-2023-36331 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: flac versions prior to 1.4.0 Description: A Buffer Overflow issue exists in the bitwriter grow function, allowing remote attackers to execute arbitrary code through crafted input to the encoder. Recommendations: For versions prior to 1.4.0,...

PT-2023-28027 · Andreas Heigl · Authldap Plugin

Name of the Vulnerable Software and Affected Versions: Andreas Heigl authLdap plugin versions = 2.5.9 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...

PT-2023-32037 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.18 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.18, update to version 3.1.18 ...

PT-2023-15226 · Unknown · Generex Cs141

Name of the Vulnerable Software and Affected Versions: Generex CS141 versions prior to 2.06 Description: The issue allows for an unrestricted upload of files, enabling an attacker to upload and/or delete any type of file without format restrictions or authentication in the "upload" directory. Thi...

PT-2023-29183 · Consensys · Gnark-Crypto

Name of the Vulnerable Software and Affected Versions: Consensys gnark-crypto versions 0.11.2 and earlier Description: The issue occurs due to the deserialisation of EdDSA and ECDSA signatures not ensuring that the data is in a certain interval, allowing Signature Malleability. Recommendations: F...

PT-2023-31971 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue is a Cross-site Scripting XSS - Reflected vulnerability in the GitHub repository microweber/microweber. This type of vulnerability allows an attacker to inject malicious scrip...

PT-2023-20527 · Unknown · Quill-Mention

Name of the Vulnerable Software and Affected Versions: quill-mention versions prior to 4.0.0 Description: The issue is related to improper user-input sanitization, which can lead to Cross-site Scripting XSS attacks. This occurs via the renderList function. If the mentions list is sourced from...

PT-2023-28025 · WordPress · Beplus Sermon'E – Sermons Online

Name of the Vulnerable Software and Affected Versions: Beplus Sermon'e – Sermons Online plugin version 1.0.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-21966 · Brett Shumaker · Simple Staff List

Name of the Vulnerable Software and Affected Versions: Brett Shumaker Simple Staff List plugin versions 2.2.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by authenticated users with editor or higher...

PT-2023-28201 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences...

PT-2023-27857 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.7 to 2.8.21 Description: A cross-site scripting issue exists in the Item List page registration process, allowing a remote unauthenticated attacker to inject an arbitrary script. Recommendations: For Welcart...

PT-2023-28356 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper versions prior to 0.3.10 Description: The abi decode function in Vyper does not validate input when it is nested in an expression, allowing for bounds checking to be bypassed and resulting in incorrect results. This can be triggered by...

PT-2023-27535 · 93Digital · 93Digital Typing Effect Plugin

Name of the Vulnerable Software and Affected Versions: 93digital Typing Effect plugin versions = 1.3.6 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to...