PT-2023-28937 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the MSEARCH ENABLE TITLE1 parameter. This potentially leads to unauthorized...

PT-2023-29137 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to the 'name' parameter of the process registration.php resource, which does not validate the characters received, and they are sent unfiltered to the database...

PT-2023-25785 · Telnet · Telnet

Name of the Vulnerable Software and Affected Versions: Telnet affected versions not specified Description: The issue concerns default credentials in Telnet, which can lead to information disclosure and denial-of-service DoS attacks. Recommendations: At the moment, there is no information about a...

CVE-2023-4003

One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges...

CVE-2023-39377

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...

PT-2023-31898 · Zephyr · Zephyr Ipm Drivers

Name of the Vulnerable Software and Affected Versions: Zephyr IPM drivers affected versions not specified Description: The issue involves two potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM drivers. Recommendations: At the moment, there is no...

CVE-2023-39377 SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...

PT-2023-36266 · Wire · Wire

Name of the Vulnerable Software and Affected Versions: wire affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.21 security release. Recommendations: At the moment, there is no information about a newer version...

PT-2023-28468 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue concerns potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2023-27894 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Security module affected versions not specified Description: The issue is related to a memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...

PT-2023-28452 · Zephyr · Zephyr Es-Wifi Driver

Name of the Vulnerable Software and Affected Versions: Zephyr eS-WiFi driver affected versions not specified Description: The issue concerns two potential buffer overflow vulnerabilities located in the Zephyr eS-WiFi driver source code. Recommendations: At the moment, there is no information abou...

PT-2023-27889 · Unknown · Pms Module

Name of the Vulnerable Software and Affected Versions: PMS module affected versions not specified Description: The issue concerns unauthorized API access in the PMS module, which may lead to abnormal feature performance upon successful exploitation. Recommendations: At the moment, there is no...

PT-2023-27885 · Dp Module · Dp Module

Name of the Vulnerable Software and Affected Versions: DP module affected versions not specified Description: The DP module has a service hijacking vulnerability. Successful exploitation of this vulnerability may affect some Super Device services. Recommendations: At the moment, there is no...

PT-2023-13726 · Kiali · Kiali

Name of the Vulnerable Software and Affected Versions: Kiali affected versions not specified Description: A content spoofing issue was found in Kiali, where it does not implement error handling when the page or endpoint being accessed cannot be found. This allows an attacker to perform arbitrary...

Input validation

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Consol...

PT-2023-6423 · Webtutor · Webtutor

Name of the Vulnerable Software and Affected Versions: WebTutor affected versions not specified Description: The issue is related to a lack of authorization in the software. It allows a remote attacker to execute arbitrary code by creating a specially crafted file. Recommendations: At the moment,...

CVE-2023-34576

SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector...

PT-2023-5877 · Delta Electronics · Diascreen

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen affected versions not specified Description: The issue is related to a buffer overflow when parsing a specially crafted input file, which could allow an attacker to execute arbitrary code in the context of the...

PT-2023-5635 · Gstreamer +9 · Gstreamer +9

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: The issue is related to a stack-based buffer overflow in the parsing of H265 encoded video files. This allows remote attackers to execute arbitrary code on affected installations of...

PT-2023-7766 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the User macros function in Nagios XI, which has insufficient access control. This can be exploited by a remote attacker to read, modify, or delete data, or cause ...