PT-2023-15783 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dialer service. This could lead to a local denial of service with no additional...

PT-2023-35849 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi check punycode string, ndpi match host subprotocol, and chec...

PT-2023-36182 · Google · Go

Name of the Vulnerable Software and Affected Versions: golang-github-vpenso-prometheus slurm exporter affected versions not specified Description: The issue is related to a security release in go 1.19. The package golang-github-vpenso-prometheus slurm exporter has been rebuilt with this security...

Cisco Identity Services Engine 输入验证错误漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An arbitrary file deletion vulnerability exists...

PT-2023-23434

Name of the Vulnerable Software and Affected Versions nasm version 2.16.02rc1 Description A heap buffer overflow issue exists. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited...

PT-2023-11923 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment,...

PT-2023-13478 · Intel · Intel Nuc 12 Compute Element +2

Name of the Vulnerable Software and Affected Versions: IntelR NUC 8 Compute Element affected versions not specified IntelR NUC 11 Compute Element affected versions not specified IntelR NUC 12 Compute Element affected versions not specified Description: The issue is related to improper input...

CVE-2023-1383

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...

PT-2023-36147 · Indent · Indent

Name of the Vulnerable Software and Affected Versions: indent affected versions not specified Description: The issue concerns multiple memory safety issues. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

PT-2023-35783 · Git +1 · Mosquitto

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the functions dynsec clients find, client free item, and dynsec clients cleanup...

PT-2023-35764 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash occurred in the sd event new function, within the fuzz-lldp-rx.c file, and was triggered by...

PT-2023-35770 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions, including bit read BB, d...

CVE-2023-28808

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

PT-2023-2307 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the Windows lock screen, which can be exploited due to errors in security settings. This could allow an attacker to bypass security...

CVE-2023-28808

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

PT-2023-21553 · Pegasystems +1 · Synchronization Engine

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A user with a compromised configuration can start an unsigned binary as a service. There is no information provided about the estimated number of...

PT-2023-35747 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported, involving functions such as bit utf8 to TU, json wstring, and json AppInfo. No information is...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

PT-2023-35741 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including iv put, mrb obj iv set force, and mrb vm...

PT-2023-35709 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves several function calls, including mrb str hash m, mrb funcall...