PT-2023-3844 · Microsoft · Windows Failover Cluster +1

Name of the Vulnerable Software and Affected Versions: Windows Failover Cluster affected versions not specified Description: The issue is related to information disclosure in the Failover Cluster component of Windows operating systems. It allows a remote attacker to gain unauthorized access to...

PT-2023-25680 · Unknown · Andrea Tarantini Menubar

Name of the Vulnerable Software and Affected Versions: Andrea Tarantini Menubar plugin versions = 5.8.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-34452 Grav vulnerable to Self Cross Site Scripting in /forgot_password

Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgotpassword" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. While this vulnerability can potentially allow an...

PT-2023-3137 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is no information provid...

PT-2023-17608 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible out of bounds write due to improper locking, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and...

PT-2023-22375 · Google · Android

Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app for Android versions 7.0 through 8.0 Description: The issue allows unauthorized applications to inject data into the database that stores user personal preferences, which can be loaded into memory and used when t...

PT-2023-21929 · Unknown · Twister Antivirus

Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8 Description: A problematic issue has been found in the function 0x804f2158/0x804f2154/0x804f2150/0x804f215c/0x804f2160/0x80800040/0x804f214c/0x804f2148/0x804f2144/0x801120e4/0x804f213c/0x804f2140 in the library...

CVE-2022-37599

A flaw was found in the interpolateName function in interpolateName.js in the webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js. This flaw can lead to a regular expression denial of service ReDoS. Mitigation Mitigation for this issue is either not available or the...

PT-2023-2776 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center Software affected versions not specified Description: The issue is related to weaknesses in the authorization procedure of the Cisco DNA Center application programming interface. It may allow a remote attacker to gain...

PT-2023-11967 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

AMD Secure Processor和AMD System Management Unit 缓冲区错误漏洞

The AMD System Management Unit SMU and AMD Secure Processor ASP are both products of UltraMicroelectronics AMD, Inc.The AMD System Management Unit is a system management unit.The AMD Secure Processor is a standalone AMD Secure Processor is a standalone ARM Coretex-A5 chip. A security vulnerabilit...

PT-2023-20854 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. The vendor states that this is an expected abort on out-of-memory error. Recommendation...

PT-2023-21583 · Avalanche · Avalanche

Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An authentication bypass issue exists that could allow an attacker to gain access by exploiting the SetUser method or by exploiting a Race Condition in the authentication message. Recommendation...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Service Connector. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...

CVE-2023-28866

An out-of-bounds OOB memory access flaw was found in net/bluetooth/hcisync.c due to a missing exit patch while in loop in ampinit1 and ampinit2. This issue could allow an attacker to leak internal kernel information. Mitigation Mitigation for this issue is either not available or the currently...

PT-2023-17284 · Unknown · Sourcecodester Online Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A problematic issue was found in the SourceCodester Online Payroll System. This issue affects the file /admin/deduction edit.php, where the manipulation of the description argument...

PT-2023-12851 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

PT-2023-13112 · Unknown · Wifi Driver

Name of the Vulnerable Software and Affected Versions: Wi-Fi driver affected versions not specified Description: The issue is related to incorrect error handling in the Wi-Fi driver, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

PT-2022-27913 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the REMOTE USER parameter in the get access sub 45AC2C function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider restricting access to t...