PT-2023-9344 · Unknown · Tinode Chat

Name of the Vulnerable Software and Affected Versions: Tinode Chat affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Tinode Chat, allowing a remote attacker to conduct cross-site scripting attacks by injecting specially crafte...

PT-2023-30804 · Softnext · Softnext Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to a path traversal vulnerability within a specific URL parameter. This allows an unauthenticated remote attacker to bypass authentication and download...

PT-2023-32698 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in kubeflow/kubeflow. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2023-32699 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which are then executed by the user's browser. No...

PT-2023-36078 · Repox · Repox

Name of the Vulnerable Software and Affected Versions: Repox affected versions not specified Description: An authentication bypass issue has been found, allowing a remote user to send a specially crafted POST request to alter or create users due to the lack of any authentication method...

PT-2023-7867 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Cloud Files Mini Filter driver, which can be exploited to elevate privileges. This could...

Siemens Opcenter Quality 安全漏洞

Opcenter Quality is a quality management system QMS that enables organizations to safeguard compliance, optimize quality, reduce the cost of defects and rework, and achieve operational excellence by improving process stability. simatic pcs neo is a distributed control system DCS. the SINUMERIK...

PT-2023-7676 · Microsoft · Windows Sysmain Service +1

Name of the Vulnerable Software and Affected Versions: Windows Sysmain Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Sysmain Service, allowing an attacker to potentially elevate their privileges. This could impact the...

PT-2023-7618 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This allows a remote attacker to execute arbitrary cod...

PT-2023-9242 · Unknown · Masterscada 4D

Name of the Vulnerable Software and Affected Versions: MasterSCADA 4D affected versions not specified Description: The issue is related to incorrect restriction of access to a directory with limited access in the MasterSCADA 4D SCADA system. Exploitation of this issue may allow a remote attacker ...

PT-2023-8028

Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description The issue is due to insufficient input validation in Microsoft Defender. An attacker can exploit this to cause a denial of service using specially crafted input. Recommendations At...

PT-2023-7607 · Microsoft · Power Platform Connector

Name of the Vulnerable Software and Affected Versions: Microsoft Power Platform Connector affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow a remote attacker to conduct a spoofing attack by sendi...

PT-2023-35628 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in the Apache POI library, specifically in the org.apache.poi.hdgf.streams package. The crash is related to the findChunks and findChildren methods in the...

selfpoc

It is an offensive tool for web exploitation. The repository con...

PT-2023-30844 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device. Recommendations: At the moment, there is no information about a newer versio...

PT-2023-21869 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab affected versions not specified Description: The issue concerns a session forgery problem. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2023-32555 · Bcb · Bcb

Name of the Vulnerable Software and Affected Versions: BCB affected versions not specified Description: The issue is related to an oversight in BCB handling of reboot reason, allowing for persistent code execution. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-30845 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot vulnerability that results in persistent code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

Google Android has an unspecified vulnerability (CNVD-2023-9748944)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android has an unspecified vulnerability (CNVD-2023-9749140)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...