PT-2023-4379 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Cloud Files Mini Filter driver, which can be exploited to elevate privileges. This could...

PT-2023-4387 · Microsoft · Windows Mobile Device Management +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Device Management affected versions not specified Description: The issue is related to insecure privilege management in Windows Mobile Device Management, which can allow an attacker to elevate their privileges. This could...

PT-2023-4370 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to elevate their privileges. This can affect the system, potentially leading...

PT-2023-4378 · Microsoft · Windows System Assessment Tool +1

Name of the Vulnerable Software and Affected Versions: Windows System Assessment Tool affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows System Assessment Tool, which can be exploited to elevate privileges. This allows an attacker ...

PT-2023-4384 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows operating system's message queuing component. Exploitation of this issue may allow an attacker...

PT-2023-4291 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ in Windows operating systems. This can be exploited by a remote attacker to...

PT-2023-25212

Name of the Vulnerable Software and Affected Versions Azure HDInsight affected versions not specified Description The issue concerns a spoofing vulnerability in Azure HDInsight Jupyter Notebook. No specific details about the technical aspects of the vulnerability, such as API endpoints, vulnerabl...

PT-2023-18290 · Unknown · Trusted Execution Environment

Name of the Vulnerable Software and Affected Versions: Trusted Execution Environment affected versions not specified Description: The issue involves memory corruption in the Trusted Execution Environment when the service API is called with an invalid address. Recommendations: At the moment, there...

PT-2023-18311 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: RIL affected versions not specified Description: The issue is related to memory corruption in RIL when attempting to send an apdu packet. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

PT-2023-26324

Name of the Vulnerable Software and Affected Versions Azure Apache Hadoop affected versions not specified Description The issue is related to a spoofing vulnerability in Azure Apache Hadoop. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2023-25211

Name of the Vulnerable Software and Affected Versions Azure Apache Hive affected versions not specified Description The issue concerns a spoofing vulnerability in Azure Apache Hive. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2023-25733

Name of the Vulnerable Software and Affected Versions Azure Apache Oozie affected versions not specified Description The issue concerns a spoofing vulnerability in Azure Apache Oozie. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2023-18313 · Unknown · Gps Hlos Driver

Name of the Vulnerable Software and Affected Versions: GPS HLOS Driver affected versions not specified Description: The issue is related to memory corruption in the GPS HLOS Driver. Specifically, when the injectFdclData function receives data with an invalid data length, it can cause memory...

PT-2023-7553

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in OpenCMS, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations At the moment, there ...

PT-2023-7554

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in OpenCMS, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations At the moment, there ...

PT-2023-25997 · Unknown · Unica Platform

Name of the Vulnerable Software and Affected Versions: Unica Platform affected versions not specified Description: A Persistent Cross-site Scripting XSS issue can be carried out on certain pages, allowing an attacker to hijack a user's session and perform other attacks. Recommendations: At the...

PT-2023-25998 · Unknown · Unica Campaign

Name of the Vulnerable Software and Affected Versions: Unica Campaign affected versions not specified Description: A Persistent XSS issue can be exploited in a certain field, allowing an attacker to hijack a user's session and perform other attacks. Recommendations: At the moment, there is no...

PT-2023-5011 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: CODESYS versions affected versions not specified Description: The issue is related to insufficient input validation in the CMPappBP component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of servic...

PT-2023-23081 · Foundry · The Foundry Magritte Plugin Rest-Source

Name of the Vulnerable Software and Affected Versions: The Foundry Magritte plugin rest-source affected versions not specified Description: The issue is related to an XML external Entity attack XXE in the rest-source plugin. This type of attack allows an attacker to access local or remote content...

CVE-2023-26450

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker...