PT-2023-27371 · Gnu +2 · Gnu Inetutils +2

Name of the Vulnerable Software and Affected Versions: GNU inetutils versions prior to 2.5 Description: The issue allows privilege escalation due to unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is relevant if the setuid system call fails when ...

OESA-2023-1504 bouncycastle security update

The package is organised so that it contains a light-weight API suitable for use in any environment including the newly released J2ME with the additional infrastructure to conform the algorithms to the JCE framework. Security Fixes: Bouncy Castle For Java before 1.74 is affected by an LDAP...

CVE-2023-29151

Uncontrolled search path element in some IntelR PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2023-28938

Uncontrolled resource consumption in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access...

CVE-2023-28658

Insecure inherited permissions in some IntelR oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC Code Issue Vulnerability

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC versions prior to 5.5.2.1. An attacker can exploit the vulnerability to elevate privileges...

PT-2023-21178

Name of the Vulnerable Software and Affected Versions IntelR Optimization for Tensorflow versions prior to 2.12 Description The issue is related to improper buffer restrictions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations F...

eProsima Fast DDS Security Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS versions prior to 2.9.1, which stems from the fact that improper serial number validation may cause the remote...

Intel Driver and Support Assistant Cross-Site Scripting Vulnerability

Intel Driver and Support Assistant is an Intel Driver and Support Assistant application from Intel Corporation USA. The program is mainly used to detect and install system driver updates. A security vulnerability exists in Intel Driver and Support Assistant versions prior to 23.1.9. An attacker c...

Intel PROSet/Wireless WiFi Software Security Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi software for Windows versions prior to 22.220, which stems from improper access control. An attacker can exploit the vulnerability to...

Intel Optimization for Tensorflow software buffer error vulnerability

Intel Optimization for Tensorflow is a set of tools and libraries optimized for the TensorFlow framework from Intel Corporation USA. A security vulnerability exists in Intel Optimization for Tensorflow versions prior to 2.12, which stems from incorrect buffer limits. An attacker can exploit the...

Input validation

An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

PT-2023-22881 · Telecom · Telecom

Name of the Vulnerable Software and Affected Versions: Telecom versions prior to SMR Aug-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to call the "endCall API" without permission. This can be exploited by attackers to potentially disrupt or...

PostgreSQL Security Vulnerabilities

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL versions prior to 15.4,...

PT-2023-22901 · Unknown · Wifigeofencemanager

Name of the Vulnerable Software and Affected Versions: WifiGeofenceManager versions prior to SMR Aug-2023 Release 1 Description: The issue allows a local attacker to gain arbitrary file access through PendingIntent hijacking in the WifiGeofenceManager. Recommendations: For versions prior to SMR...

Cacti security breach

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.6, which ste...

PT-2023-22892 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is related to an out-of-bounds write in the DoOemFactorySendFactoryBypassCommand of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations: F...

CVE-2023-33468

KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical scree...

CVE-2023-39004

Insecure permissions in the configuration directory /conf/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information e.g., hashed root password which could lead to privilege escalation...

PT-2023-26730 · Opnsense · Opnsense Community Edition +1

Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: The issue is related to insecure permissions in the configuration directory /conf/ of OPNsense, allowing attackers to access...