PT-2023-5063 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system. It allows an attacker to potentially elevate their privileges. Recommendations: At the...

Design/Logic Flaw

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already...

CVE-2022-27599 QVR Pro Client

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already...

CVE-2022-27599 QVR Pro Client

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already...

PT-2023-28230 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

PT-2023-36000 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state includes functions such as H5F accum free, H5MF xfree, and H5MF free aggrs. Recommendations: At the moment, there is no...

Oracle Linux 5 : ELSA-2014-0926-1: / kernel (ELSA-2014-09261)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-09261 advisory. - The rdsiwladdrcheck function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service NULL pointer dereferen...

Security Bulletin: Vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester

Summary There are vulnerabilities in IBM SDK Java Technology Edition, Version 1.8 and IBM Runtime Environment Java Version 1.8 used by Rational Service Tester. Rational Service Tester has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified...

VulnCheck KEV: CVE-2023-35674

Android Framework contains an unspecified vulnerability that allows for privilege escalation...

PT-2023-26438 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local escalation of privilege with no additional execution privileges. Recommendations...

PT-2023-21791 · Unknown · Sane Library

Name of the Vulnerable Software and Affected Versions: SNPE library affected versions not specified Description: A malformed DLC can trigger memory corruption in the SNPE library due to an out of bounds read. This can occur when loading an untrusted model, such as from a remote source...

PT-2023-24138 · Qualcomm · Qualcomm Snapdragon Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Chipsets affected versions not specified Description: The issue is related to a Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. There is no information provided about the estimated...

PT-2023-13242 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive multimedia affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in Automotive multimedia. There is no information provided about the estimated number of potentially...

PT-2023-26422 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local information disclosure with no additional execution privileges. Recommendations:...

PT-2023-17650 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-17659 · Camsys · Camsys

Name of the Vulnerable Software and Affected Versions: camsys affected versions not specified Description: In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is...

PT-2023-17660 · Seninf · Seninf

Name of the Vulnerable Software and Affected Versions: seninf affected versions not specified Description: In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction i...

PT-2023-17647 · Duraspeed · Duraspeed

Name of the Vulnerable Software and Affected Versions: duraspeed affected versions not specified Description: The issue is related to a missing permission check in duraspeed, which could lead to local information disclosure without requiring additional execution privileges. User interaction is no...

PT-2023-36253 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: Terraform affected versions not specified Description: The issue is related to a security release in Go 1.21, which Terraform depends on. The estimated number of potentially affected devices worldwide is not available. There is no information...

CVE-2023-41741

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager SRM before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vectors...