PT-2023-3781

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Trend Micro Apex Central, allowing for potential exploitation. This could enable a remote attacker ...

PT-2024-11230 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the SLUB redzoning feature in the Linux kernel, which checks for corruption from s-object size instead of s-inuse. This can cause the freelist pointer to be...

PT-2023-19856 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted SKP file in Autodesk products is used to trigger a use-after-free issue. Exploitation of this issue may lead to code execution. Recommendations: At the momen...

PT-2023-2708 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to elevate their privileges. There is no information provided about the...

PT-2025-26062 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the RDMA/siw component. The issue occurs when the siw recv mpa rr function returns -EAGAIN, indicating that the MPA...

PT-2024-11839 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the netfilter conntrack module. The issue occurs when nf conntrack hash check insert fails in nf ct ext valid pre/post,...

CVE-2023-30846 typed-rest-client vulnerable to potential leak of authentication data to 3rd parties

typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with...

PT-2023-21543 · Hewlett Packard · Hpe Oneview +1

Name of the Vulnerable Software and Affected Versions: HPE OneView and HPE OneView Global Dashboard appliance affected versions not specified Description: The issue concerns HPE OneView and HPE OneView Global Dashboard appliance dumps potentially exposing authentication tokens. There is no...

PT-2023-36146 · Unknown · S390-Tools

Name of the Vulnerable Software and Affected Versions: s390-tools affected versions not specified Description: The issue is related to the secure boot key. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-35790 · Org.Json · Org.Json

Name of the Vulnerable Software and Affected Versions: org.json affected versions not specified Description: The issue is related to a security exception in the org.json library. The crash occurs in the JSONArray.writeTo function, which is called by JSONStringer.value and JSONStringer.peek...

PT-2023-21320 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

CVE-2023-28122

A local privilege escalation LPE vulnerability in UI Desktop for Windows Version 0.59.1.71 and earlier allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later...

PT-2023-35777 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash occurs in the dwg encode function, as indicated by the crash state. This issue is relate...

PT-2023-2312 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is ...

PT-2023-2272 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to potentially elevate their privileges. Recommendations: At the moment, ther...

PT-2023-20464 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The issue is related to improper input validation, which can lead to remote code execution. This is described as issue 3 of 4, indicating it is one part of a larger set of problems...

PT-2023-13269 · Qualcomm · 9205 Lte Modem Firmware +18

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem is reading configuration parameters. Recommendations: At the moment, ther...

PT-2023-17094 · Unknown +8 · Binutils-Gdb +8

Name of the Vulnerable Software and Affected Versions: binutils-gdb affected versions not specified Description: The issue is a heap-based buffer overflow in the bfd getl64 function located in binutils-gdb/bfd/libbfd.c. This overflow can potentially lead to exploitation. No information is provide...

PT-2023-21875 · Sauter +1 · Ey-As525F001 With Moduweb +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could...

PT-2023-15732 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue is related to a heap out-of-bounds read. Successful exploitation can cause the Bluetooth process to crash. Recommendations: At the moment, there is no information about a...