Remote Code Execution

rxvt-unicode is vulnerable to remote code execution. The package is vulnerable to a remote code execution via the Perl background extension when an attacker is able to control the data written to the user's terminal and certain options are set...

Top SaaS Cybersecurity Threats in 2023: Are You Ready?

Cybercriminals will be as busy as ever this year. Stay safe and protect your systems and data by focusing on these 4 key areas to secure your environment and ensure success in 2023, and make sure your business is only in the headlines when you WANT it to be. 1 — Web application weaknesses Web...

PT-2023-1012 · Sap · Sap Bpc Ms

Name of the Vulnerable Software and Affected Versions: SAP BPC MS 10.0 version 810 Description: The issue allows an unauthorized attacker to execute crafted database queries, potentially leading to SQL injection. This could enable an attacker to access, modify, and/or delete data from the backend...

Timing Attack

github.com/robbert229/jwt is vulnerable to Timing Attacks. A remote attacker is able to determine the expected hash-based message authentication codeHMAC with a large enough number of requests over a low latency connection...

PT-2023-16015 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and then displays it to other users, allowing an...

PT-2023-16016 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository usememos/memos. This type of attack allows an attacker to inject malicious scripts into a...

PT-2023-11385 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was reported via the National Vulnerability Database. No additional details are provided about the nature of the problem or its...

PT-2023-14907 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-13716 · Unem +1 · Unem +1

Name of the Vulnerable Software and Affected Versions: FOXMAN-UN versions R9C through R15B UNEM versions R9C through R15B Description: The affected products store both public and private keys used to sign and protect Custom Parameter Set CPS files from modification. An attacker who exploits this...

PT-2023-12391 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...

PT-2023-12174 · Mootools +1 · Mootools +1

Name of the Vulnerable Software and Affected Versions: MooTools versions all known versions Description: The issue concerns a CSS selector parser in MooTools that is vulnerable to Regular Expression Denial of Service ReDoS. An attack can occur if an attacker can inject a string into a CSS selecto...

WordPress Panda Pods Repeater Field Plugin < 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Panda Pods Repeater Field Type Plugin Vulnerable versions 1.5.4 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4306 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3af98eaf0325 Credits cydave...

PT-2023-13102 · Disp · Disp

Name of the Vulnerable Software and Affected Versions: disp affected versions not specified Description: The issue is related to a possible use after free due to a race condition in disp. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

PT-2023-14112 · Ibm · Ibm Business Automation Workflow

Name of the Vulnerable Software and Affected Versions: IBM Business Automation Workflow versions 18.0.0 through 22.0.1 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

Privilege Escalation

github.com/usememos/memos is vulnerable to privilege escalation. Incorrect use of privileged APIs due to insecure direct object references allows an attacker to archive private memos and delete/edit shortcuts on the user's behalf...

PT-2023-14342 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is from the National...

PT-2023-14363 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is available via the...

PT-2023-14321 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a rejection of a CVE record due to non-compliance with CNA rules,...

PT-2023-14355 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record was rejected due to non-compliance with CNA rules as it has not been used. The information is available via the National Vulnerabilit...

PT-2023-14346 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is from the National...