PT-2023-11661 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IOBit Malware Fighter version 8.0.2 Description: An issue was discovered in ImfHpRegFilter.sys, allowing local attackers to cause a denial of service DoS. Recommendations: For IOBit Malware Fighter version 8.0.2, consider updating to a newer...

PT-2023-27042 · Unknown · Leotheme Leoblog

Name of the Vulnerable Software and Affected Versions: LeoTheme leoblog versions up to 3.1.2 Description: The issue is related to a SQL injection vulnerability. It affects the component LeoBlogBlog::getListBlogs. There is no information provided about the estimated number of potentially affected...

PT-2023-26099 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev381-g817a848f6-master Description: A segmentation violation was discovered in the BM ParseIndexValueReplace function at /lib/libgpac.so. This issue affects the GPAC library. Recommendations: For GPAC version...

PT-2023-24976 · Telegram · Telegram

Name of the Vulnerable Software and Affected Versions: Telegram version 9.6.3 Description: The issue allows attackers to hide critical information on the User Interface by calling the function SFSafariViewController. This can potentially lead to users being unaware of important details...

PT-2023-25040 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: The issue is related to an Assertion Failure in the parser parse for statement start function at jerry-core/parser/js/js-parser-statm.c. This failure can occur due to a problem in the parsin...

PT-2023-21936 · Unknown · Escan Antivirus

Name of the Vulnerable Software and Affected Versions: eScan Antivirus version 22.0.1400.2443 Description: A problematic vulnerability was found in the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It...

PT-2023-23547 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: A use after free issue was discovered in the pp getline function at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-22231

Name of the Vulnerable Software and Affected Versions LangChain versions 0.0.0 through 0.0.131 Description The issue allows prompt injection attacks that can execute arbitrary code via the Python exec method. This is specifically related to the LLMMathChain chain in LangChain. Recommendations For...

PT-2023-17140 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability was found in the IOCTL Handler component of the library ObCallbackProcess.sys, affecting the function 0x222034/0x222038/0x22203C/0x222040. This leads to denial o...

PT-2023-20803 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 15.11.0.6US W20EV4.0br v15.11.0.61068 1546 841 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetSysTime function. Recommendations: For Tenda W20E version 15.11.0.6US W20EV4.0br...

PT-2023-9852 · Tcpreplay +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.3 Description: The issue is related to the cidr2cidr function in the Tcpreplay utility, which can cause a denial of service when exploited by a remote attacker. This function is part of the PCAP file handler and is...

PT-2023-34473 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A memory leak issue was discovered in the test firmware init function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.14 and is...

PT-2023-33500 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a use-after-free error in the qlcnic dcb enable function. This error occurs when the qlcnic dcb enable function fails, potentially leading to a security issue. The...

PT-2022-27362 · Ip Com · Ip-Com Ew9

Name of the Vulnerable Software and Affected Versions: IP-COM EW9 version 15.11.0.149732 Description: A command injection issue was found in the cmd get ping output function. Recommendations: For IP-COM EW9 version 15.11.0.149732, as a temporary workaround, consider disabling the cmd get ping...

PT-2022-35280 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a NULL pointer dereference in the lt9611 connector init function. This problem has been identified but its actual impact and potential for attack have not been...

PT-2022-7425 · Sysstat +10 · Sysstat +10

Name of the Vulnerable Software and Affected Versions: sysstat versions 9.1.16 through 12.7.0 Description: The issue is related to the allocate structures function in sa common.c, which insufficiently checks bounds before arithmetic multiplication, allowing for an overflow in the size allocated f...

PT-2022-26218 · Pypi · D8S-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-networking version 0.1.0 Description: The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. Recommendations: F...

PT-2022-25561 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter versions =3.1.13 Description: The issue concerns SQL Injection via the or like function in the system/database/DB query builder.php file. Note that the validity of this issue has been disputed by multiple third parties...

PT-2022-23001 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions 5.0 through 5.5 Description: An issue in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM, potentially leading to escalating privileges to SMM. This is due to an SMM...

PT-2022-23983 · Uniwill · Sparkio.Sys

Name of the Vulnerable Software and Affected Versions: Uniwill SparkIO.sys driver version 1.0 Description: The issue is related to a stack-based buffer overflow in the Uniwill SparkIO.sys driver. This overflow can be triggered via IOCTL 0x40002008. Recommendations: For Uniwill SparkIO.sys driver...