PT-2023-15682 · Unknown · Ams Module

Name of the Vulnerable Software and Affected Versions: AMS module affected versions not specified Description: The issue is related to a lack of permission verification in APIs, which may impact data confidentiality. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-3793 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to the SettingConfigController class in the NETGEAR ProSAFE Network Management System, which lacks an authorization procedure. This...

PT-2023-15244 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible missing permission check in the WLAN driver, which could lead to local information disclosure. Recommendations: At the moment, there is no information...

PT-2023-1440 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to incorrect resource release in Microsoft Edge, allowing a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information...

PT-2024-14719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when a corrupted snap trace is received, and it is not clear what happened on the MDS side. To prevent potential corruption or incorrect content access, the patch blocks...

PT-2024-11780

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel. Specifically, the ifcvf mgmt dev leaks memory if it is not freed before returning. A call is made to the correct return stateme...

CVE-2023-23614 Improper session handling of "Remember me for 7 days" functionality

Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vulnerable to Insufficient Session Expiration. Improper use of admin WEBPASSWORD hash as "Remember me for 7 days" cookie value makes it possible for an...

PT-2023-19365 · Baicells · Baicells Nova 233 +2

Name of the Vulnerable Software and Affected Versions: Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 Description: The issue concerns hardcoded credentials in the firmware of the affected devices. These credentials are easily discoverable a...

PT-2023-36084 · Kuchiki · Kuchiki

Name of the Vulnerable Software and Affected Versions: kuchiki affected versions not specified Description: The kuchiki repository has been archived. As a result, users may need to consider alternative solutions. Possible alternatives include kuchikiki, html5ever, and xml-rs. Recommendations: At...

PT-2023-13702 · Ibm · Ibm Spectrum Virtualize

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Virtualize versions 7.8, 8.2, 8.3, 8.4, 8.5 Description: The issue could disclose sensitive information to an attacker using man-in-the-middle techniques under certain configurations. Recommendations: For versions 7.8, 8.2, 8.3,...

PT-2023-13707 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue allows a user to manually manipulate access, enabling an authentication bypass. This means that an individual can potentially gain unauthorized access...

PT-2023-10144 · Unknown · Nayshlok Voyager

Name of the Vulnerable Software and Affected Versions: Nayshlok Voyager affected versions not specified Description: A critical vulnerability was found in Nayshlok Voyager, affecting an unknown functionality of the file Voyager/src/models/DatabaseAccess.java. The manipulation leads to sql...

PT-2023-16014 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: A flaw in Keycloak allows impersonation and lockout due to incorrect handling of email trust. This issue enables an attacker to shadow other users with the same email, potentially leading ...

CVE-2022-38489

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting XSS. Version 2022.1.110.1.02 fixes the vulnerably...

PT-2023-7037 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to improper code generation control in Visual Studio Code, allowing an attacker to execute arbitrary code. This can be exploited to gain unauthorized access...

PT-2023-1255 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue exists due to insufficient input validation in the 3D Builder program, which can allow an attacker to execute arbitrary code on the target system by opening a specially crafted...

PT-2023-9420 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential NULL dereference in the drm/amdgpu component of the Linux kernel. This occurs when the resource manager, referred to as "man", might be NULL,...

PT-2023-12799 · Unknown · Multimedia Framework

Name of the Vulnerable Software and Affected Versions: Multimedia Framework affected versions not specified Description: The issue is related to memory corruption in the Multimedia Framework, caused by unsafe access to data members. Recommendations: At the moment, there is no information about a...

PT-2023-12367 · Hewlett Packard · Hpe

Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...

PT-2023-10105 · Unknown · Jobs-Plugin

Name of the Vulnerable Software and Affected Versions: Jobs-Plugin affected versions not specified Description: A problematic vulnerability was found in the Jobs-Plugin, affecting an unknown functionality, which leads to cross-site scripting. The attack can be launched remotely. Recommendations: ...