PT-2023-20509 · Bwm-Ng · Bwm-Ng

Name of the Vulnerable Software and Affected Versions: bwm-ng affected versions not specified Description: The issue is related to Command Injection due to improper input sanitization in the check function in the bwm-ng.js file. To potentially exploit this, an attacker needs the ability to run...

PT-2023-12605 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by addition overflow in the video framework. Successful exploitation may affect availability. Recommendations: At the moment, there...

PT-2023-12606 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by an addition overflow in the video framework. This could potentially affect availability upon successful exploitation...

PT-2023-35848 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state includes functions such as H5MM xstrdup, H5G ent to link, and H5G stab lookup cb. Recommendations: At the moment, there i...

PT-2023-12076 · Unknown · Ingress-Nginx

Name of the Vulnerable Software and Affected Versions: ingress-nginx affected versions not specified Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the...

PT-2023-23262 · Snap One · Snap One Ovrc

Name of the Vulnerable Software and Affected Versions: Snap One OvrC affected versions not specified Description: The issue concerns Snap One OvrC cloud servers, where an attacker can exploit a route to bypass requirements and claim devices outright. No information is provided about the estimated...

PT-2023-35842 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 6 crash has been reported. The crash involves the functions fragment addresses equal, g hash table lookup extended, and fragme...

PT-2023-2805 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE, which could allow an authenticated,...

PT-2023-3781

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Trend Micro Apex Central, allowing for potential exploitation. This could enable a remote attacker ...

PT-2024-11230 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the SLUB redzoning feature in the Linux kernel, which checks for corruption from s-object size instead of s-inuse. This can cause the freelist pointer to be...

PT-2023-19856 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted SKP file in Autodesk products is used to trigger a use-after-free issue. Exploitation of this issue may lead to code execution. Recommendations: At the momen...

PT-2023-2708 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to elevate their privileges. There is no information provided about the...

PT-2024-11839 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the netfilter conntrack module. The issue occurs when nf conntrack hash check insert fails in nf ct ext valid pre/post,...

PT-2025-26062 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the RDMA/siw component. The issue occurs when the siw recv mpa rr function returns -EAGAIN, indicating that the MPA...

CVE-2023-30846 typed-rest-client vulnerable to potential leak of authentication data to 3rd parties

typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with...

PT-2023-21543 · Hewlett Packard · Hpe Oneview +1

Name of the Vulnerable Software and Affected Versions: HPE OneView and HPE OneView Global Dashboard appliance affected versions not specified Description: The issue concerns HPE OneView and HPE OneView Global Dashboard appliance dumps potentially exposing authentication tokens. There is no...

PT-2023-36146 · Unknown · S390-Tools

Name of the Vulnerable Software and Affected Versions: s390-tools affected versions not specified Description: The issue is related to the secure boot key. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-35790 · Org.Json · Org.Json

Name of the Vulnerable Software and Affected Versions: org.json affected versions not specified Description: The issue is related to a security exception in the org.json library. The crash occurs in the JSONArray.writeTo function, which is called by JSONStringer.value and JSONStringer.peek...

PT-2023-21320 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

CVE-2023-28122

A local privilege escalation LPE vulnerability in UI Desktop for Windows Version 0.59.1.71 and earlier allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later...