PT-2023-29450 · Ibm · Ibm Robotic Process Automation For Cloud Pak +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7.10 IBM Robotic Process Automation versions 23.0.0 through 23.0.10 IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.10 IBM Robotic Process Automation for...

Atlassian Releases Security Advisory for Confluence Data Center and Server

Atlassian released a security advisory to address a vulnerability CVE-2023-22518 affecting Confluence Data Center and Server. A cyber actor could exploit this vulnerability to obtain sensitive information. CISA encourages users and administrators to review CVE-2023-22518 - Improper Authorization...

Moderate: Red Hat Security Advisory: .NET 7.0 security update

An update for .NET 7.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2023:4306-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4306-1 advisory. - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage...

PT-2023-29820 · Xqueue Gmbh · Maileon

Name of the Vulnerable Software and Affected Versions: XQueue GmbH Maileon for WordPress plugin versions = 2.16.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious...

PT-2023-27053 · WordPress · Nsc Theme

Name of the Vulnerable Software and Affected Versions: nsc theme for WordPress version 1.0 Description: The issue is related to Reflected Cross-Site Scripting via prototype pollution due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject...

PT-2023-29718 · WordPress · Mohsin Rafique Amp Wp – Google Amp For Wordpress

Name of the Vulnerable Software and Affected Versions: Mohsin Rafique AMP WP – Google AMP For WordPress plugin versions = 1.5.15 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web applicati...

PT-2023-6398 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation V2201 versions prior to V2201.0009 Tecnomatix Plant Simulation V2302 versions prior to V2302.0003 Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing...

Important: vim

Issue Overview: Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. CVE-2023-4734 Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. CVE-2023-4735 Heap-based Buffer Overflow in...

PT-2023-5990 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-beta1 and earlier Adobe Commerce versions 2.4.6-p2 and earlier Adobe Commerce versions 2.4.5-p4 and earlier Adobe Commerce versions 2.4.4-p5 and earlier Description: The issue is related to the lack of protection...

PT-2023-29253 · WordPress · Md Jakir Hosen Tiger Forms – Drag/Drop Form Builder

Name of the Vulnerable Software and Affected Versions: MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin versions prior to 2.0.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...

CVE-2023-5256

In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled,...

CVE-2023-41324

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user that have read access on users resource can steal accounts of other users. Users are advised t...

CVE-2023-41321

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. An API user can enumerate sensitive fields values on resources on which he has read access. Users are...

PT-2023-21265 · Unknown · Webvitaly Sitekit

Name of the Vulnerable Software and Affected Versions: Webvitaly Sitekit plugin versions = 1.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. There is no information provide...

PT-2023-28126 · Travelmap · Travelmap

Name of the Vulnerable Software and Affected Versions: TravelMap plugin versions 1.0.1 and earlier Description: The issue is related to an Unauth. Cross-Site Scripting XSS vulnerability. Recommendations: For versions 1.0.1 and earlier, update to a version later than 1.0.1 to resolve the issue...

PT-2023-28355

Name of the Vulnerable Software and Affected Versions Zope versions prior to 4.8.10 and 5.8.5 Description Zope is an open-source web application server with a stored cross site scripting vulnerability for SVG images. The vulnerability can be exploited when an attacker uploads an image and tricks ...

SUSE: Security Advisory (SUSE-SU-2023:3640-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-4980 · Zoho · Zoho Manageengine Admanager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to Build 7200 Description: The issue is related to insufficient access control in the Zoho ManageEngine ADManager Plus software for managing Active Directory services. It allows a remote attacke...

Debian: Security Advisory (DLA-3560-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...