CVE-2023-43905

Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecified vectors...

Improper access control

Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecified vectors...

PT-2023-10705 · Abus · Abus Tvip Cameras

Name of the Vulnerable Software and Affected Versions: ABUS TVIP cameras affected versions not specified Description: The issue is related to incorrect access control, allowing unauthenticated remote attackers to view the "/video.mjpg" video stream. Recommendations: At the moment, there is no...

PT-2023-30150 · Elastic · Sharepoint Online Python Connector

Name of the Vulnerable Software and Affected Versions: Elastic Sharepoint Online Python Connector affected versions not specified Description: An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a...

PT-2023-31803 · Zephyr · Zephyr Stm32 Crypto Driver

Name of the Vulnerable Software and Affected Versions: Zephyr STM32 Crypto driver affected versions not specified Description: A potential buffer overflow vulnerability exists in the Zephyr STM32 Crypto driver. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-29040 · Writercms · Writercms

Name of the Vulnerable Software and Affected Versions: writercms version 1.1.0 Description: The issue is related to incorrect access control, allowing attackers to directly obtain backend account passwords via unspecified vectors. Recommendations: For writercms version 1.1.0, at the moment, there...

PT-2023-28371 · Unknown · Eisbaer Scada

Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows an attacker to access files or directories outside the...

PT-2023-29647 · Unknown +1 · Stb Vorbis +1

Name of the Vulnerable Software and Affected Versions: stb vorbis affected versions not specified Description: The issue is related to a memory allocation failure in the start decoder function when processing a crafted ogg vorbis file. This failure causes the function to return early, setting...

PT-2023-6456 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Edge, based on Chromium. It involves a lack of protection for sensitive data. Exploitation...

Ubuntu 16.04 ESM : Salt vulnerabilities (USN-4769-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4769-1 advisory. It was discovered that Salt allowed remote attackers to write to arbitrary files via a special crafted file. An attacker could use this vulnerability to...

CVE-2023-30131

An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other unspecified impacts via unauthenticated API calls...

PT-2023-7229 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. The specific flaw exists within the parsing of MXF video files, resulting from the lac...

Oracle Java SE Security Update (oct2023) 02 - Windows

Oracle Java SE is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Security Update (oct2023) 02 - Linux

Oracle Java SE is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Security Update (oct2023) 03 - Linux

Oracle Java SE is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Security Update (oct2023) 01 - Windows

Oracle Java SE is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API...

PT-2023-29105 · Unknown · Huks Ta Module

Name of the Vulnerable Software and Affected Versions: huks ta module affected versions not specified Description: The issue is related to a clone vulnerability in the huks ta module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the moment,...

PT-2023-29096 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Device authentication module affected versions not specified Description: The issue concerns brute-force attacks on the device authentication module. Successful exploitation may affect service confidentiality. Recommendations: At the moment,...

PT-2023-20612 · Xiaomi · Xiaomi Router

Name of the Vulnerable Software and Affected Versions: Xiaomi Router affected versions not specified Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection. This allows for Command Injection in the Xiaomi Router...