PT-2024-1573 · Minio +2 · Minio +2

Name of the Vulnerable Software and Affected Versions: MinIO versions prior to RELEASE.2024-01-31T20-20-33Z Description: The issue is related to the inheritance of permissions by access keys in MinIO, a high-performance object storage system. When an access key is created, it inherits the...

PT-2024-11007 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions 8.x Description: The issue is related to an Access Control problem. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

PT-2024-13589 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read in the video decoder due to improper input validation. This could lead to a local denial of servic...

PT-2024-1088

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 7.0.15 Redis versions prior to 7.2.4 Description: The issue is related to integer overflow due to incorrect handling of memory buffer resizing, which can lead to heap overflow and potential remote code execution. The...

PT-2024-41017 · Clamav · Clamav

Name of the Vulnerable Software and Affected Versions: ClamAV affected versions not specified Description: The issue concerns the ClamAV package, which was updated to a new upstream version. This update was necessary to maintain compatibility with signature database downloads. There is no...

PT-2024-1067 · Ivanti · Ivanti Endpoint Manager +2

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2022 SU 5 Description: The issue is related to a SQL injection vulnerability that can be exploited to execute arbitrary SQL queries and retrieve output without authentication. Under specific...

PT-2023-19094 · Documize · Documize

Name of the Vulnerable Software and Affected Versions: Documize version 5.4.2 Description: The issue allows remote attackers to execute arbitrary code via the user parameter of the "/api/dashboard/activity" endpoint. This enables attackers to potentially gain unauthorized access and control over...

CVE-2023-46156

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations...

Design/Logic Flaw

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations...

CVE-2023-46156

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations...

PT-2023-35632 · Git +1 · Selinux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state includes is decl requires met, enable avrules, and link modules. No informatio...

PT-2023-31014 · Unknown · Xinhu Xinhuoa

Name of the Vulnerable Software and Affected Versions: xinhu xinhuoa version 2.2.1 Description: The issue is related to a File upload vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2023-28836

Name of the Vulnerable Software and Affected Versions MLFlow versions 2.8.1 and before Description An issue in MLFlow allows a remote attacker to obtain sensitive information via a crafted request to the REST API. Approximately 4,120 devices are potentially affected, mainly distributed in the...

PT-2023-35620 · Git +1 · Jq

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions decToString, decNumberToString, and jv number get literal. No...

PT-2023-14134 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns elevation of privilege. No additional details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the moment,...

PT-2023-35619 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the pcpp::TLSECPointFormatExtension::getECPointFormatList function, which is...

PT-2023-36293 · Unknown · Fdo-Client

Name of the Vulnerable Software and Affected Versions: fdo-client affected versions not specified Description: The issue concerns the removal of a build key via utils/keys gen.sh. No information is provided about the estimated number of potentially affected devices or real-world incidents where...

CVE-2023-44322

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.0, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.0, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.0, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.0, SCALANCE...

CVE-2023-44374

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.0, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.0, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.0, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.0, SCALANCE...

CVE-2023-44373

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323...