PT-2023-17001 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.0.23 Description: The issue is related to improper authorization in the teampass GitHub repository. It allows for authorization bypass through a user-controlled key. There is no information provided about the...

PT-2023-18229 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to reset the setting. Recommendations: For versions prior to SMR Mar-2023 Release 1, update...

PT-2023-18223 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization implementation, which leads to incorrect handling of unencrypted messages. Recommendations: For versions prior to SMR Mar-202...

CVE-2022-37940

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch...

CVE-2022-37940

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch...

PT-2023-19624 · Unknown · Advanced Authentication

Name of the Vulnerable Software and Affected Versions: Advanced Authentication versions prior to 6.4.1.1 Advanced Authentication versions prior to 6.3.7.2 Description: The issue is related to broken access control. There is no information provided about the estimated number of potentially affecte...

PT-2023-2194 · Zoom · Zoom Client For It Admin

Name of the Vulnerable Software and Affected Versions: Zoom Client for IT Admin versions prior to 5.13.5 Description: The issue is related to a local privilege escalation vulnerability in the Zoom Client for IT Admin Windows installers. It is caused by synchronization errors when using a shared...

PT-2023-13605 · Ernest Marcinko · Ajax Search Lite

Name of the Vulnerable Software and Affected Versions: Ernest Marcinko Ajax Search Lite plugin versions = 4.10.3 Description: The issue is related to the exposure of sensitive information to unauthorized actors. Recommendations: For Ernest Marcinko Ajax Search Lite plugin versions = 4.10.3, updat...

SUSE-SU-2023:0730-1 Security update for jakarta-commons-fileupload

This update for jakarta-commons-fileupload fixes the following issues: - CVE-2016-3092: Fixed a usage of vulnerable FileUpload package can result in denial of service bsc986359. - CVE-2023-24998: Fixed a FileUpload deny of service with excessive parts bsc1208513...

PT-2023-1900 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An...

PT-2023-15418 · WordPress · Wp Go Maps

Name of the Vulnerable Software and Affected Versions: WP Go Maps plugin versions = 9.0.15 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability affects the WP Go Maps plugin, which w...

PT-2023-1934 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.5.2 and earlier Adobe Illustrator versions 27.2.0 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current...

PT-2023-1898 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2023-15214 · Paul C. Schroeder · The Ip Vault – Wp Firewall

Name of the Vulnerable Software and Affected Versions: Paul C. Schroeder IP Vault – WP Firewall plugin versions prior to 1.2 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions prio...

PT-2023-20416 · WordPress · Registrationmagic

Name of the Vulnerable Software and Affected Versions: RegistrationMagic plugin versions = 5.1.9.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-15209 · Unknown · Void Contact Form 7 Widget For Elementor Page Builder

Name of the Vulnerable Software and Affected Versions: Void Contact Form 7 Widget For Elementor Page Builder plugin versions = 2.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

Design/Logic Flaw

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and...

SUSE-SU-2023:0696-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2023-24998: Fixed FileUpload DoS with excessive parts bsc1208513...

SUSE-SU-2023:0694-1 Security update for redis

This update for redis fixes the following issues: - CVE-2022-36021: Fixed integer overflow in RANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands bsc1208790. - CVE-2023-25155: Fixed integer Overflow in RAND commands can lead to assertion bsc1208793. The following non-security bug was fixed: - Fixed...

Intel® HAXM Advisory

Summary: A potential security vulnerability in the Intel® Hardware Accelerated Execution Manager HAXM software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21812 Description: Improper access...