PT-2023-27573 · Urild · Urild

Name of the Vulnerable Software and Affected Versions: urild affected versions not specified Description: The issue is related to a possible out of bounds write in the urild service due to a missing bounds check. This could lead to local denial of service and requires System execution privileges...

PT-2023-27566 · Messaging · Messaging

Name of the Vulnerable Software and Affected Versions: Messaging affected versions not specified Description: The issue is related to a possible missing permission check in Messaging. This could lead to local information disclosure with no additional execution privileges needed. Recommendations: ...

PT-2023-27553 · Unknown · Jpg Driver

Name of the Vulnerable Software and Affected Versions: jpg driver affected versions not specified Description: The issue is related to a logic error in the jpg driver, which could lead to a use after free scenario. This might result in remote information disclosure without requiring additional...

PT-2023-27575 · Unknown · Fw-Packagemanager

Name of the Vulnerable Software and Affected Versions: FW-PackageManager affected versions not specified Description: The issue is related to a possible missing permission check in FW-PackageManager. This could lead to local escalation of privilege, with System execution privileges needed...

PT-2023-36064 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as skip chunk, http cb, and is located in fuzz.c. No...

PT-2023-27561 · Unknown · Soundrecorder

Name of the Vulnerable Software and Affected Versions: SoundRecorder affected versions not specified Description: The issue is related to a possible missing permission check in the SoundRecorder service. This could lead to local information disclosure with no additional execution privileges...

CVE-2023-23371

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following...

CVE-2023-23371 QVPN Device Client

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following...

CVE-2023-23371 QVPN Device Client

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following...

glibc: Stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

VulnCheck KEV: CVE-2023-42824

Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation...

PT-2023-18589 · Nokia · Wavelite

Name of the Vulnerable Software and Affected Versions: Nokia WaveLite products affected versions not specified Description: The issue allows a local user to create new users with administrative privileges by manipulating a web request if Security Hardening guide rules are not followed. This affec...

PT-2023-36052 · Git +1 · Apache Poi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the java.base/java.util.Arrays.copyOf, java.base/java.lang.AbstractStringBuilder.ensureCapacityInterna...

PT-2023-19823 · Unknown · Data Modem

Name of the Vulnerable Software and Affected Versions: data Modem affected versions not specified Description: The issue is related to Information Disclosure in the data Modem while parsing an FMTP line in an SDP message. Recommendations: At the moment, there is no information about a newer versi...

PT-2023-27750 · Qsige · Qsige

Name of the Vulnerable Software and Affected Versions: QSige affected versions not specified Description: The QSige statistics are affected by a remote SQL injection vulnerability. The web application does not correctly filter input parameters, allowing SQL injections, Denial of Service DoS, or...

PT-2023-24149 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Firmware that occurs while parsing rsn ies. There is no information provided about the estimated number of potentiall...

PT-2023-19821 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Modem while allocating DSM items. No information is provided about the estimated number of potentially affected devices...

PT-2023-18477 · Unknown · Data Modem

Name of the Vulnerable Software and Affected Versions: Data Modem affected versions not specified Description: The issue is related to memory corruption in the Data Modem when making a MO call or MT VOLTE call. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-24061 · Tvapi · Tvapi

Name of the Vulnerable Software and Affected Versions: TVAPI affected versions not specified Description: The issue is related to a possible out of bounds write in TVAPI due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-28944 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the derb6zmklgtjuhh2cn5chn2qjbm2stgmfa4.oastify.comscription1name parameter,...