PT-2023-6558

Name of the Vulnerable Software and Affected Versions Django versions 3.2 before 3.2.22 Django versions 4.1 before 4.1.12 Django versions 4.2 before 4.2.6 Description The issue is related to the django.utils.text.Truncator chars and words methods when used with html=True, which can be subject to ...

PT-2023-36050 · Git +1 · Libdwarf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 8, with the crash state...

Broadpeak Centralized Accounts Management Auth Agent Cross-Site Scripting Vulnerability

Broadpeak Centralized Accounts Management Auth Agent is a centralized accounts management authentication agent application from Broadpeak France. A cross-site scripting vulnerability exists in Broadpeak Centralized Accounts Management Auth Agent versions 01.01.00.19219575ee9195b0,...

PT-2023-18334 · Qualcomm · Snapdragon +140

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves improper access to the VM resource manager, which can lead to memory corruption. There is no information provided about the estimated...

PT-2023-27612 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number,...

Code injection

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2023-21265 · Unknown · Webvitaly Sitekit

Name of the Vulnerable Software and Affected Versions: Webvitaly Sitekit plugin versions = 1.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. There is no information provide...

PT-2023-36034 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a Heap-buffer-overflow READ 1. The crash state involves functions such as cos...

PT-2023-5518 · Kostac · Kostac Plc Programming

Name of the Vulnerable Software and Affected Versions: Kostac PLC Programming Software versions 1.6.9.0 and earlier Kostac PLC Programming Software version 1.6.11.0 Description: The issue is related to a use after free vulnerability, which can be exploited by opening a specially crafted project...

PT-2023-27212 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.10 Description: FreeSWITCH is a Software Defined Telecom Stack that enables digital transformation from proprietary telecom switches to a software implementation. The issue allows remote users to trigger an o...

PT-2023-28145 · Shirasagi · Shirasagi

Name of the Vulnerable Software and Affected Versions: SHIRASAGI versions prior to 1.18.0 Description: The issue is related to a Post-Unicode normalization problem. This occurs when security checks are performed before Unicode normalization, allowing Unicode character equivalents to resurface aft...

PT-2023-11408 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions a candidate that is unused by its CNA and refers to the National...

PT-2023-10089 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-11176 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment, there is no information about a newer...

PT-2023-27385 · Canonical +2 · Moodle

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No details are provided about the issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-23202 · Schweitzer Engineering Laboratories · Acselerator Quickset

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software versions through 7.1.3.0 Description: An Inclusion of Functionality from Untrusted Control Sphere issue could allow an attacker to embed instructions that could be...

PT-2023-35989 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions ndpi domain classify contains, ndpi ge...

PT-2023-5248 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to 2.3-DEV Description: The issue is related to a heap-based buffer overflow in the avi read function of the GPAC multimedia platform, which can lead to a denial of service. This is caused by the avi read function in the...

CVE-2023-40253

CVE-2023-40253 describes an Improper Authentication vulnerability in Genians Genian NAC products and Genian ZTNA. Affected: Genian NAC v4.0.0–v4.0.155; Genian NAC v5.0.0–v5.0.42; Genian NAC Suite v5.0.0–v5.0.54; Genian ZTNA v6.0.0–v6.0.15. Root cause: authentication abuse/misuse due to improper a...

CVE-2022-43456

Uncontrolled search path in some IntelR RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access...