PT-2023-23434

Name of the Vulnerable Software and Affected Versions nasm version 2.16.02rc1 Description A heap buffer overflow issue exists. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited...

PT-2023-11923 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment,...

PT-2023-13478 · Intel · Intel Nuc 12 Compute Element +2

Name of the Vulnerable Software and Affected Versions: IntelR NUC 8 Compute Element affected versions not specified IntelR NUC 11 Compute Element affected versions not specified IntelR NUC 12 Compute Element affected versions not specified Description: The issue is related to improper input...

CVE-2023-1383

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...

PT-2023-36147 · Indent · Indent

Name of the Vulnerable Software and Affected Versions: indent affected versions not specified Description: The issue concerns multiple memory safety issues. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

PT-2023-35783 · Git +1 · Mosquitto

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the functions dynsec clients find, client free item, and dynsec clients cleanup...

PT-2023-35770 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions, including bit read BB, d...

PT-2023-35764 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash occurred in the sd event new function, within the fuzz-lldp-rx.c file, and was triggered by...

CVE-2023-28808

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

PT-2023-2307 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the Windows lock screen, which can be exploited due to errors in security settings. This could allow an attacker to bypass security...

CVE-2023-28808

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

PT-2023-21553 · Pegasystems +1 · Synchronization Engine

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A user with a compromised configuration can start an unsigned binary as a service. There is no information provided about the estimated number of...

PT-2023-35747 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported, involving functions such as bit utf8 to TU, json wstring, and json AppInfo. No information is...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

PT-2023-35741 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including iv put, mrb obj iv set force, and mrb vm...

PT-2023-35709 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves several function calls, including mrb str hash m, mrb funcall...

PT-2023-19390 · Undefined · Undefined

В повсеместно используемых чипсетах Samsung Exynos было обнаружено 18 0-day, о которых участники команды Google Project Zero сообщали в период с конца 2022 по начало 2023 года. Четыре из восемнадцати уязвимостей включая CVE-2023-24033 и три других, все еще ожидающих CVE-ID были классифицированы к...

PT-2023-35699 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash state includes functions such as mrb bint sub, int sub, and mrb vm exec. No...

PT-2023-1746 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Client Server Run-Time Subsystem CSRSS affected versions not specified Description: The vulnerability is related to the lack of protection for service data in the Windows operating system. It allows an attacker to obtain sensitive...

PT-2023-13571 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is mentioned in the context of the National Vulnerability Database. No general information about the issue, estimated number of potentially affected devices, or real-world...