PT-2023-14904 · Sguda · Sguda U-Lock

Name of the Vulnerable Software and Affected Versions: SGUDA U-Lock central lock control service affected versions not specified Description: The issue is related to incorrect authorization in the lock management function of the SGUDA U-Lock central lock control service. A remote attacker with...

PT-2023-14905 · Sguda · Sguda U-Lock

Name of the Vulnerable Software and Affected Versions: SGUDA U-Lock central lock control service affected versions not specified Description: The issue is related to incorrect authorization in the user management function of the SGUDA U-Lock central lock control service. A remote attacker with...

Ultimate Dashboard < 3.7.6 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "Ultimate Dashboard - Settings - General"...

openssl: X.400 address type confusion in X.509 GeneralName

A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2022-46308

SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privilege can exploit this vulnerability to call privileged APIs to access, modify and delete user information...

CVE-2023-24943

Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

CVE-2023-24940

Windows Pragmatic General Multicast PGM Denial of Service Vulnerability...

Remote code execution

Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

Denial of service

Windows Pragmatic General Multicast PGM Denial of Service Vulnerability...

CVE-2023-24943 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

...

CVE-2023-24940 Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

...

openssl: X.400 address type confusion in X.509 GeneralName

A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

...

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

...

CVE-2023-24940: NULL Pointer Dereference

Windows Pragmatic General Multicast PGM Denial of Service Vulnerability...

CVE-2023-24943: Heap-based Buffer Overflow

Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...

PT-2023-2698 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Pragmatic General Multicast PGM protocol in Windows operating systems, specifically due to insufficient input validation. This can be...

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...