PT-2023-29252 · WordPress · Table Of Contents Plus

Name of the Vulnerable Software and Affected Versions: Michael Tran Table of Contents Plus plugin versions = 2302 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-26162 · WordPress · Optimonk

Name of the Vulnerable Software and Affected Versions: OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin versions = 2.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

D-Link DAR-7000 Code Issue Vulnerability

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2023-36027 · Git +1 · Mrab-Regex

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as bytes1 char at, ascii at line end, and try match. Recommendations: At the moment, there is no...

PT-2023-36022 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions: bit u expand, bit TV to utf8, and dwg...

PT-2023-10062 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a candidate that is unused by its CNA, as stated in the National Vulnerability Database. Recommendations: At the moment,...

PT-2023-11054 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment, there is no information about a newer versi...

PT-2023-11160 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate that is unused by its CNA and refers to the National...

PT-2023-25662 · Opswat · Opswat Metadefender Kiosk

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK where long inputs were not properly processed, allowing remote attackers to cause a denial of service, resulting in a loss of...

PT-2023-9967 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-28184 · Jenkins · Jenkins Frugal Testing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Frugal Testing Plugin versions 1.1 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from...

PT-2023-4791 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.179 Description: The issue is related to an out of bounds memory access in the FedCM component of Google Chrome, allowing a remote attacker who has compromised the renderer process to perform an out ...

PT-2023-21822 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon chipsets affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL while parsing WMI command parameters. This can potentially lead to security risks, but specific details about...

PT-2023-27617 · Phpjabbers · Phpjabbers Make An Offer Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Make an Offer Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" file. This allows for potential malicious script execution. Recommendations: For PHPJabbers Make an...

PT-2023-27806 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-26520 · Cbc · Cbc

Name of the Vulnerable Software and Affected Versions: CBC products affected versions not specified Description: The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. The NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H,...

PT-2023-18386 · WordPress · Seo Alert Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: SEO ALert WordPress plugin versions 1.59 and earlier Description: The SEO ALert WordPress plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...

PT-2023-26921 · Unknown · Servicewifiresources

Name of the Vulnerable Software and Affected Versions: ServiceWifiResources affected versions not specified Description: The issue is related to insecure signatures in the ServiceWifiResources module. Successful exploitation may cause ServiceWifiResources to be maliciously modified and overwritte...

PT-2025-5682 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel's netfilter component, specifically the nf tables subsystem. It has been observed that insertion operations should ignore duplicate but expired...

PT-2023-21100 · Everest Themes · Mocho Blog Theme

Name of the Vulnerable Software and Affected Versions: Everest themes Mocho Blog theme versions 1.0.4 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...