PT-2023-6755 · Siemens · Siemens Solid Edge Se2022 +1

Name of the Vulnerable Software and Affected Versions: Siemens Solid Edge SE2022 versions prior to V222.0MP12 Siemens Solid Edge SE2023 versions prior to V223.0Update2 Description: The issue is related to the use of an uninitialized pointer on the stack while parsing specially crafted PAR files...

PT-2023-6656 · Siemens · Siemens Solid Edge Se2022 +1

Name of the Vulnerable Software and Affected Versions: Siemens Solid Edge SE2022 versions prior to V222.0MP12 Siemens Solid Edge SE2023 versions prior to V223.0Update2 Description: The issue is related to a buffer overflow in memory when reading data. This can be exploited by an attacker using...

PT-2023-6669 · Siemens · Siemens Solid Edge Se2022 +1

Name of the Vulnerable Software and Affected Versions: Siemens Solid Edge SE2022 versions prior to V222.0MP12 Siemens Solid Edge SE2023 versions prior to V223.0Update2 Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing specially crafted...

PT-2023-6665 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to V223.0Update2 Description: A vulnerability has been identified that involves an out of bounds read past the end of an allocated structure while parsing special...

QATzip for Intel® QAT Advisory

Summary: A potential security vulnerability in the QATzip software maintained by Intel® for Intel® QuickAssist Technology QAT may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-36369 Description:...

Intel® Network Adapter Software Advisory

Summary: A potential security vulnerability in some Intel® Network Adapter installer software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-41314 Description: Uncontrolled search path in some...

Siemens Mendix

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2023-1650 · Unknown · Sipass Integrated Ac5102 +1

Name of the Vulnerable Software and Affected Versions: SiPass integrated AC5102 ACC-G2 versions prior to V2.85.44 SiPass integrated ACC-AP versions prior to V2.85.43 Description: A vulnerability has been identified in the telnet command line interface of the affected devices, where they improperl...

GSD-2023-1002166 drm/amd/display: Calculate output_color_space after pixel encoding adjustment

drm/amd/display: Calculate outputcolorspace after pixel encoding adjustment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

IDOR Vulnerability in Nextcloud Mail

None...

SUSE-SU-2023:0392-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Update to 14.7: - CVE-2022-41862: Fixed memory leak in libpq bsc1208102...

PT-2023-35272 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to incorrect arithmetics when fetching VLAN header bits in the nft payload component of netfilter. The actual impact and attack plausibility have not yet been proven...

PT-2023-20271 · Connectwise · Connectwise Control

Name of the Vulnerable Software and Affected Versions: ConnectWise Control versions prior to 22.9.10032 Description: The issue arises from the failure to validate user-supplied parameters, such as the h parameter in Bin/ConnectWiseControl.Client.exe. This leads to reflected data and the injection...

PT-2023-35341 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.0 through v4.19.270 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.0...

PT-2023-35042 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.17 through v6.1.7 Description: A race condition exists between quota rescan and disable, potentially leading to a NULL pointer dereference. The actual impact and attack plausibility have not yet been proven...

PT-2023-35243 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A potential NULL pointer dereference issue exists in the ncm bitrate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-35005 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential issue in the Bluetooth implementation of the Linux Kernel may cause a deadlock in rfcomm sk state change. The actual impact and attack plausibility have not yet been proven...

PT-2023-34962 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a potential underflow in the sof ipc4 priority mask dfs write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34967 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.10 Description: A NULL pointer issue was found in the skb segment list function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35087 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the memblock free late function, where pages are not always released to the buddy allocator. This could potentially lead to security vulnerabilities, although the actu...