PT-2023-25139 · Stylemixthemes · Stylemixthemes Masterstudy Lms Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin versions prior to 3.0.8 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or highe...

PT-2023-21140 · Unknown · Wow-Company Button Generator

Name of the Vulnerable Software and Affected Versions: Wow-Company Button Generator – easily Button Builder plugin versions prior to 2.3.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For...

PT-2023-11379 · Woocommerce · Abandoned Cart Pro For Woocommerce +1

Name of the Vulnerable Software and Affected Versions: Abandoned Cart Lite for WooCommerce versions up to, and including, 5.1.3 Abandoned Cart Pro for WooCommerce versions up to, and including, 7.12.0 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input...

PT-2023-21607 · Unknown · Wp Chill Brilliance

Name of the Vulnerable Software and Affected Versions: WP Chill Brilliance theme versions prior to 1.3.1 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authenticated users with subscriber or higher privileges to inject malicious scripts. Recommendations: For WP Chil...

SUSE: Security Advisory (SUSE-SU-2023:2578-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2579-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: grafana: - Version update from 8.5.22 to 9.5.1 jscPED-3694: Security fixes: - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip bsc1209645 - CVE-2023-1387: grafana: JWT URL-login flow leaks token to data sources through request...

PT-2023-5599 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions 1.4.0 Description: The issue is related to a regression in the Filesystem scope check for dotfiles on Unix systems, introduced in the 1.4.0 release. This regression affects Tauri applications using wildcard scopes in the fs...

PT-2023-25180 · Webklex +1 · Webklex/Laravel-Imap +2

Name of the Vulnerable Software and Affected Versions: PHP-IMAP versions prior to 5.3.0 Description: An unsanitized attachment filename allows any unauthenticated user to leverage a directory traversal vulnerability, which results in a remote code execution vulnerability. Every application that...

PT-2023-25361 · WordPress · Team Heateor Super Socializer

Name of the Vulnerable Software and Affected Versions: Team Heateor Super Socializer plugin versions prior to 7.13.53 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. Recommendations: For Team Heateor...

CVE-2023-34162

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail...

Design/Logic Flaw

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail...

SUSE-SU-2023:2535-1 Security update for xen

This update for xen fixes the following issues: Security fixes: - CVE-2022-42336: Fix an issue where guests configuring AMD Speculative Store Bypass Disable would have no effect XSA-431 bsc1211433. - CVE-2022-42335: Fixed an issue where guests running under shadow mode with a PCI devices passed...

CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

CVE-2023-34162

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail...

PT-2023-25303 · WordPress · Backup Manager

Name of the Vulnerable Software and Affected Versions: WP Backup Manager plugin versions prior to 1.13.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

CVE-2023-34162

CVE-2023-34162 is described across multiple sources as a vulnerability in the HMS Core "version update determination" logic within the Huawei HarmonyOS user profile module. The key impact stated is a potential for repeated HMS Core updates and resulting service failures. The connected documents d...

CVE-2023-34162

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail...

PT-2023-3767 · Siemens · Simatic Wincc

Name of the Vulnerable Software and Affected Versions: SIMATIC WinCC versions prior to V7.5.2.13 Description: The issue is related to improper permission assignment for a critical resource in the SCADA system. This could allow an authenticated local attacker to inject arbitrary code and escalate...

SUSE-SU-2023:2445-1 Security update for google-cloud-sap-agent

This update of google-cloud-sap-agent fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441. - Update to version 1.5.1 bsc1210464 - Raise golang API version to 1.20...

Important: libtasn1

Issue Overview: GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder. CVE-2021-46848 Affected Packages: libtasn1 Issue Correction: Run dnf update libtasn1 --releasever 2023.0.20230607 or dnf update --advisory ALAS2023-2023-201 --releasever...