PT-2023-22857 · Unknown · Uwbaospadapterservice

Name of the Vulnerable Software and Affected Versions: UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 Description: The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the getChipInfos function...

Progress Software MOVEit Transfer 安全漏洞

Progress Software MOVEit Transfer is an automated file transfer software from Progress Software, USA. The software supports file transfers and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that originates from allowing an attacker...

PT-2023-25704 · Kanboard +1 · Kanboard +1

Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.31 Description: Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31, an authenticated user is able to perform a SQL Injection, leading to a privilege...

Fides 路径遍历漏洞

Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A path traversal vulnerability exists in Fides versions prior to 2.15.1, which stems from the presence of a...

PT-2023-3386 · Unknown · Tn-5900 Series

Name of the Vulnerable Software and Affected Versions: TN-5900 Series versions 3.3 and prior Description: The issue allows a remote attacker to determine whether a user is valid during password recovery through the web login page, potentially enabling a brute force attack with valid users. This i...

PT-2023-21648 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2022 Su3 Description: A deserialization of untrusted data exists that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS vulnerabilities to escala...

Ericsson Network Manager 输入验证错误漏洞

Ericsson Network Manager is a network manager from Ericsson, Sweden. It covers monitoring, troubleshooting, configuration, automation and optimization of networks. A security vulnerability exists in Ericsson Network Manager versions prior to 22.2, which stems from the presence of an open redirect...

Ucopia 安全漏洞

Ucopia Express is a device used for Wifi management by the French company Ucopia. A security vulnerability exists in Ucopia versions prior to 6.0.13, which stems from an SSH server with insecure privileges...

PT-2023-23084 · Foundry · Workspace-Server

Name of the Vulnerable Software and Affected Versions: Foundry workspace-server versions prior to 7.7.0 Description: A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This allowed users...

PT-2023-12079 · Emby · Emby Server

Name of the Vulnerable Software and Affected Versions: Emby Server versions prior to 4.6.0.50 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via a crafted GET request to the "/web" API endpoint. Recommendations: For Emby Server versions prior to...

PT-2023-18269 · Cc Mode · Cc Mode

Name of the Vulnerable Software and Affected Versions: CC Mode versions prior to SMR Jun-2023 Release 1 Description: The issue is related to improper privilege management, allowing physical attackers to manipulate the device in a way that results in unexpected behavior in CC Mode under specific...

PT-2023-25175 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 1.18.8 Description: The issue is related to a missing authorization check, allowing unauthorized users to manipulate a dashboard created by the administrator in an open source data visualization analysis tool...

Admidio 安全漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A security vulnerability exists in Admidio versions prior to 4.2.9 that stems from incorrect access control...

CVE-2023-20885

Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This issue affects Notifications: All versions prior to 63; SMB-volume release: All versions prior to 3.1.19; cf-nfs-volume release: 5.0.X versions prior to 5.0.27, 7.1.X versions...

OpenBSD 资源管理错误漏洞

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project team. A security vulnerability exists in OpenBSD versions prior to 7.2 errata 026, and prior to 7.3 errata 004, which stems from a double-release or post-release reuse issue with SSLclear...

OTCMS 代码问题漏洞

OTCMS Nettie CMS is an article-based web content management system CMS. A code issue vulnerability exists in OTCMS versions prior to 6.62, which stems from a server-side request forgery due to misuse of the signalUrl parameter...

CVE-2023-30766

Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78,...

PT-2023-19627 · Micro Focus · Arcsight Logger

Name of the Vulnerable Software and Affected Versions: ArcSight Logger versions prior to 7.3.0 Description: The issue is related to a Potential XML External Entity Injection. Recommendations: For versions prior to 7.3.0, update to version 7.3.0 or later to resolve the issue...

PT-2023-3767 · Siemens · Simatic Wincc

Name of the Vulnerable Software and Affected Versions: SIMATIC WinCC versions prior to V7.5.2.13 Description: The issue is related to improper permission assignment for a critical resource in the SCADA system. This could allow an authenticated local attacker to inject arbitrary code and escalate...

PT-2023-19625 · Micro Focus · Arcsight Logger

Name of the Vulnerable Software and Affected Versions: ArcSight Logger versions prior to 7.3.0 Description: The issue is related to Potential Cross-Site Scripting. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...