PT-2023-6762 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge, allowing an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about...

PT-2023-15831 · Unknown · Secure Os Module

Name of the Vulnerable Software and Affected Versions: Secure OS module affected versions not specified Description: The issue concerns configuration defects in the secure OS module. Successful exploitation of this defect will affect availability. Recommendations: At the moment, there is no...

PT-2023-24701 · Huawei · Hms Core

Name of the Vulnerable Software and Affected Versions: HMS Core affected versions not specified Description: The issue is related to a version update determination vulnerability in the user profile module. Successful exploitation of this vulnerability may cause repeated HMS Core updates and lead ...

PT-2023-23035 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX affected versions not specified Description: The issue allows for a local exploitation to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6. Recommendations: At the moment, there is no information...

PT-2023-7990 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to a lack of protection of the web page structure in Zabbix, allowing a remote attacker to access and compromise confidential data. This is a reflected XSS attack, also...

jsonij vulnerable to stack exhaustion

An issue was discovered jmarsden/jsonij through 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

GHSA-75R3-38RH-PMXV sojo vulnerable to stack exhaustion

An issue was discovered sojo through 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34611

An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

Code injection

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure...

CVE-2023-34616

CVE-2023-34616 affects pbjson up to version 0.4.0. A crafted object using cyclic dependencies can cause a DoS or other unspecified impacts. Root cause is processing objects with cycles. Impact is denial of service (CVSS 7.5, HIGH). There is no patch version stated in the provided documents; recom...

CVE-2023-34612

The CVE concerns ph-json up to version 9.5.5 in ph-commons/ph-json stack. Affected component/ordering causes denial of service via crafted objects that use cyclic dependencies, leading to high impact (availability). Root cause described across sources is lack of safeguards when handling cyclic de...

PT-2023-5498 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the target must...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34613

An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-35116

Removed by vendor...

jsonij vulnerable to stack exhaustion

An issue was discovered jmarsden/jsonij through 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34620

The CVE-2023-34620 issue affects the hjson library (hjson-java) and is exploitable via crafted objects that use cyclic dependencies, causing a denial of service and other unspecified impacts. Technical details in connected documents indicate affected versions are 3.0.0 and earlier; the underlying...

Path traversal

Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager DSM before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors...

PT-2023-3211 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to incorrect clearance or release of resources in the Windows CryptoAPI interface, which can be exploited by a remote attacker to cause a denial of service...

PT-2023-3137 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is no information provid...