PT-2023-10089 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It mentions that the candidate is unused by its CNA and refers to the Nationa...

PT-2023-11176 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The provided information does not contain details about the issue, affected devices, or real-world incidents. Recommendations: At the moment, there is no information about a newer...

PT-2023-27385 · Canonical +2 · Moodle

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No details are provided about the issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-35989 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions ndpi domain classify contains, ndpi ge...

PT-2023-5248 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to 2.3-DEV Description: The issue is related to a heap-based buffer overflow in the avi read function of the GPAC multimedia platform, which can lead to a denial of service. This is caused by the avi read function in the...

PT-2023-23202 · Schweitzer Engineering Laboratories · Acselerator Quickset

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software versions through 7.1.3.0 Description: An Inclusion of Functionality from Untrusted Control Sphere issue could allow an attacker to embed instructions that could be...

CVE-2023-40253

CVE-2023-40253 describes an Improper Authentication vulnerability in Genians Genian NAC products and Genian ZTNA. Affected: Genian NAC v4.0.0–v4.0.155; Genian NAC v5.0.0–v5.0.42; Genian NAC Suite v5.0.0–v5.0.54; Genian ZTNA v6.0.0–v6.0.15. Root cause: authentication abuse/misuse due to improper a...

CVE-2022-43456

Uncontrolled search path in some IntelR RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-8643 · Siemens · Ruggedcom Rs8000A +50

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 versions 4.X through 5.X RUGGEDCOM i800NC versions 4.X through 5.X RUGGEDCOM i801 versions 4.X through 5.X RUGGEDCOM i801NC versions 4.X through 5.X RUGGEDCOM i802 versions 4.X through 5.X RUGGEDCOM i802NC versions 4.X through...

PT-2023-24319 · Control Id · Idsecure

Name of the Vulnerable Software and Affected Versions: Control ID IDSecure versions 4.7.26.0 and prior Description: An uncaught exception vulnerability exists, allowing attackers to cause the main web server of IDSecure to fault and crash, resulting in a denial of service. Recommendations: For...

CVE-2023-3470

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature of the password allows an authenticated user with TMSH access to the BIG-IP system, or anyone with physical access to the FIPS HSM, the information...

Design/Logic Flaw

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Code injection

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors...

CVE-2023-21406 Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...

CVE-2023-38060

Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface modules allows any authenticated attacker to to perform an host header injection for the ContentType header of the attachment. This issue...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Center Server is a management system from Gallagher New Zealand for monitoring and managing infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server versions v8.80 through v8.80.1192 MR2, v8.70 through v8.70.2185 MR4, v8.60 through v8.60.23...

PT-2023-24552 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

PT-2023-5755 · Sonicwall +1 · Sonicwall Gms +2

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to hardcoded Tomcat application credentials in the SonicWall GMS and Analytics configuration file. This could...

PT-2023-22834 · Unknown · Personamanagerservice

Name of the Vulnerable Software and Affected Versions: PersonaManagerService versions prior to SMR Jul-2023 Release 1 Description: The issue is related to improper access control in the PersonaManagerService, allowing local attackers to change configuration. Recommendations: For versions prior to...