PT-2023-12128 · Ericsson · Ericsson Mobile Switching Center Server

Name of the Vulnerable Software and Affected Versions: Ericsson Mobile Switching Center Server MSC-S versions BC 18A and IS 3.1 through IS 3.1 CP21 Description: The issue allows relative path traversal via a specific parameter in the https request after authentication, which enables access to fil...

PT-2023-30767

Name of the Vulnerable Software and Affected Versions Tura Signalix version 7T 0228 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For version 7T...

CVE-2023-41892 Craft CMS Remote Code Execution vulnerability

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15...

PT-2023-30755 · Unknown · Itm Server

Name of the Vulnerable Software and Affected Versions: Insider Threat Management ITM Server versions prior to 7.14.3.69 Description: An improper check for an exceptional condition in the ITM Server could be used by an attacker to change the server's configuration of any already-registered agent s...

PT-2023-7207 · Unknown · Itm Agent For Macos

Name of the Vulnerable Software and Affected Versions: Insider Threat Management ITM Agent for MacOS versions prior to 7.14.3.69 Description: An improper certification validation issue could allow an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agen...

DSA-5497-2 libwebp - security update

Bulletin has no description...

PT-2023-5039 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.3 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. If an attacker can convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content m...

PT-2023-26155 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions = 7.2.0 Description: Insecure default permissions in the Admin Web Client of Wing FTP Server allow for privilege escalation. Recommendations: For versions = 7.2.0, update to a version later than 7.2.0 to resolve the...

PT-2023-31069 · WordPress · Wp User Control

Name of the Vulnerable Software and Affected Versions: WP User Control plugin for WordPress versions up to, and including 1.5.3 Description: The issue arises from the plugin's use of native password reset functionality with insufficient validation on the password reset function in the WP User...

PT-2023-5159 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

JVN#41113329: Pyramid vulnerable to directory traversal

Pyramid provided by Pylons Project, which is a web framework for Python, contains a directory traversal vulnerability CWE-22. Impact index.html located one directory above the location of the static view's file system path can be accessed via a crafted request. Solution Update the software Update...

PT-2023-5202

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.22 through 1.23 Description The issue is related to uncontrolled resource consumption due to insufficient input validation when processing TAR archive headers. This can be exploited by a remote attacker to...

DSA-5493-1 open-vm-tools - security update

Bulletin has no description...

PT-2023-18738 · Samsung · Samsung Knox

Name of the Vulnerable Software and Affected Versions: Samsung Knox versions 2.8.60 and earlier Description: The issue allows an attacker to bypass the authentication process and gain access to the folder's contents. Recommendations: For versions 2.8.60 and earlier, update to a version later than...

PT-2023-26085 · Unknown · I-Doit Pro

Name of the Vulnerable Software and Affected Versions: i-doit Pro versions prior to v26 Description: The issue is related to path traversal. Recommendations: For versions prior to v26, update to a version above v25 to resolve the issue...

PT-2023-5379 · Isc +4 · Bind 9 +4

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.18.0 through 9.18.18 BIND 9 versions 9.18.11-S1 through 9.18.18-S1 Description: A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens...

HPESBGN04530 rev.2 - HPE OneView, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to 6.60.05, 7.00.00, 7.10.00, 7.20.00, 8.00.00, 8.10.00, 8.20.00, 8.30.00, 8.40.00,...

Authentication flaw

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access VPN Unauthorized Access Vulnerability

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

Cisco BroadWorks Application Delivery Platform and Xtended Services Platform Authentication Bypass Vulnerability

A vulnerability in the single sign-on SSO implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to th...