CVE-2023-24501

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

Hardcoded credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

CVE-2023-24501 Electra Central AC unit – Hardcoded Credentials

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...

PT-2023-2683 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A denial of service issue was discovered due to a possible recursive locking scenario, resulting in a deadlock in the table clear function in the drivers/md/dm-ioctl.c file of the Linu...

PT-2023-2750 · Microsoft · Malware Protection Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Microsoft Defender affected versions not specified Description: The issue is related to a lack of protection for service data in the Microsoft Malware Protection Engine...

PT-2023-19864 · Autodesk · Autodesk Maya

Name of the Vulnerable Software and Affected Versions: Autodesk Maya affected versions not specified Description: A malicious actor may convince a victim to open a malicious USD file, potentially triggering an uninitialized variable. This could result in code execution. Recommendations: At the...

CVE-2023-26845

A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...

PT-2023-2436 · Microsoft · Windows Secure Channel +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Channel affected versions not specified Description: The issue is related to insufficient input validation in the Windows Secure Channel component of Windows operating systems. Exploitation of this issue may allow a remote...

PT-2023-2429 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers in Windows operating...

PT-2023-36089 · Unknown · Tree Magic

Name of the Vulnerable Software and Affected Versions: tree magic affected versions not specified Description: The tree magic crate is unmaintained, and its GitHub repository has been archived by the author. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2023-2298 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2023-2406 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin, which can be exploited to execute arbitrary code. Recommendations: At the moment, there ...

PT-2023-2466 · Microsoft · Windows Clip Service +1

Name of the Vulnerable Software and Affected Versions: Windows Clip Service affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Clip Service of Windows operating systems. This can allow an attacker to elevate their...

OpenCats 跨站请求伪造漏洞

OpenCats is an open source recruitment process management system. A cross-site request forgery vulnerability exists in OpenCats version 0.9.7. An attacker could exploit this vulnerability to force a user to submit a web request via an unspecified vector...

PT-2023-2513 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors in the Win32k component Win32k.sys of the Windows operating system, specifically a "race condition" scenario. This can allow an attacker to...

PT-2023-15256 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a missing permission check in the telecom service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abo...

PT-2023-2313 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server versions affected versions not specified Description: The issue is caused by a race condition situation. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a...

PT-2023-2296 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input processing in the Windows operating system kernel. It allows remote attackers to execute arbitrary code by using a specially crafted malicious fil...

PT-2023-2302 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient input validation in the Windows DNS server, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

PT-2023-2299 · Microsoft · Windows Boot Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Boot Manager affected versions not specified Description: The issue is related to errors in security settings of the Windows Boot Manager, allowing an attacker to bypass security restrictions. This can potentially affect the system...