PT-2023-30400 · Withsecure · Withsecure Linux Protection +7

Name of the Vulnerable Software and Affected Versions: WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

Cisco IP Phone Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation ...

Cisco Secure Client Software Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Clie...

KLA62191 ACE vulnerability in Apache Tomcat

A improper input validation vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Fixed in Apache Tomcat 9.0.83 Related products Apache-Tomcat CVE list CVE-2023-46589 critical Solution Update to the latest version...

SUSE-SU-2023:4442-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release labeled 20231113. bsc1215278 - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. bsc1215278...

Mitre: CVE-2023-24023 Bluetooth Vulnerability

Microsoft is aware of the Bluetooth Forward and Future Secrecy Attacks and Defenses BLUFFS vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that enforces the us...

PT-2023-7353 · Intel · Intel Xtu

Name of the Vulnerable Software and Affected Versions: IntelR XTU versions prior to 7.12.0.15 Description: The issue is related to an uncontrolled search path element in IntelR XTU software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This...

PT-2023-7153 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.006.20360 and earlier Adobe Acrobat Reader versions 20.005.30524 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to a Use After Free vulnerability that could result i...

PT-2023-24527 · Intel · Intel(R) Nuc 12 Pro Kits & Mini Pcs +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC 12 Pro Kits & Mini PCs - NUC12WS IntelR HID Event Filter Driver installation software versions prior to 2.2.2.1 Description: The issue is related to an uncontrolled search path in the IntelR HID Event Filter Driver installation...

PT-2023-14014 · Intel · Intel In-Band Manageability

Name of the Vulnerable Software and Affected Versions: Intel In-Band Manageability software versions prior to 3.0.14 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2023-24872 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: Intel Battery Life Diagnostic Tool versions prior to 2.2.1 Description: The issue is related to an uncontrolled search path in the Intel Battery Life Diagnostic Tool software. This may allow an authenticated user to potentially enable...

Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in some Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32204 Description: Improper access control in so...

Intel® DCM Software Advisory

Summary: A potential security vulnerability in some Intel® Data Center Manager DCM software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31273 Description: Protection mechanism failure in so...

PT-2023-21087 · Intel · Intel Oneapi Toolkit +1

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI HPC Toolkit versions 2023.1 and earlier IntelRMPI Library software versions prior to 2021.9 Description: The issue is related to a protection mechanism failure in the affected software, which may allow a privileged user to...

PT-2023-30495 · Fatcat Apps · Fatcat Apps Forms For Mailchimp

Name of the Vulnerable Software and Affected Versions: Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin versions = 2.5.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with editor or higher permissions. This ty...

PT-2023-21184 · Intel · Intel(R) Server Information Retrieval Utility

Name of the Vulnerable Software and Affected Versions: IntelR Server Information Retrieval Utility versions prior to 16.0.9 Description: The issue is related to an uncontrolled search path element in the IntelR Server Information Retrieval Utility software. This may allow an authenticated user to...

PT-2023-13486 · Intel · Intel(R) Aptio* V Uefi Firmware Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR Aptio V UEFI Firmware Integrator Tools versions prior to iDmiEdit-Linux-5.27.06.0017 Description: The issue is related to improper access control in the IntelR Aptio V UEFI Firmware Integrator Tools, which may allow a privileged user t...

PT-2023-21683 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows - HW Version 2.0 versions prior to 2.0.4 Description: The issue is related to improper authorization in IntelR QAT drivers, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2023-30492 · Themeum · Themeum Wp Crowdfunding Plugin

Name of the Vulnerable Software and Affected Versions: Themeum WP Crowdfunding plugin versions = 2.1.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially affecting...

PT-2023-23697 · Intel · Intel Nuc Uniwill Service Driver

Name of the Vulnerable Software and Affected Versions: IntelR NUC Uniwill Service Driver version 1.0.1.6 and earlier Description: The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path transversal in the IntelR NUC Uniwill Service Driver...