PT-2023-1752 · Microsoft · Windows Media +1

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Media component. This allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is...

PT-2023-1749 · Microsoft · Windows Point-To-Point Protocol Over Ethernet +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol over Ethernet PPPoE versions affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Point-to-Point Protocol PPP implementation. Th...

PT-2023-1727 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. An elevation-of-privilege vulnerability allo...

PT-2023-1755 · Microsoft · Windows Partition Management Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Partition Management Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Partition Management Driver, which can be exploited to elevate privileges. This allows an...

PT-2023-1775 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insecure privilege management in the Windows Graphics Component. It allows an attacker to elevate their privileges. There is no information provid...

PT-2023-1730 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Secure Channel Schannel component of Windows operating systems. This can be exploited to cause a denial of service...

PT-2023-1769 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to incorrect clearing or release of resources in Microsoft Office packages. Exploitation of this issue may allow a remote attacker to cause a denial of service...

PT-2023-1750 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Media Foundation component of Windows operating systems. This allows a remote attacker to execute...

PT-2023-13256 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC affected versions not specified Description: The issue is related to memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain. Recommendations: At the moment...

PT-2023-7122 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap,...

PT-2023-12793 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to memory corruption in the Modem due to the usage of an out-of-range pointer offset in UIM. Recommendations: At the moment, there is no information about a newer version...

PT-2023-13271 · Qualcomm · Snapdragon +45

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to memory corruption caused by a stack-based buffer overflow in the core when sending a command from a USB device of large size. Recommendations: At the moment, there ...

PT-2023-12689 · Red Hat · Keycloak Node.Js Adapter

Name of the Vulnerable Software and Affected Versions: Keycloak Node.js Adapter affected versions not specified Description: A flaw was found in the Keycloak Node.js Adapter, allowing an attacker to benefit from an Open Redirect vulnerability in the checkSso function. This issue is also present...

Updated vim packages fix security vulnerability

A null pointer dereference issue was discovered in function guix11createblankmouse in guix11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. CVE-2022-47024 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225...

CVE-2022-23240

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors...

PT-2023-36063 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions: sc hsm write ef, sc hsm update binary, and sc upda...

PT-2023-16504 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue is related to an improper validation of array index. This could allow an attacker to crash the server and remotely execute arbitrary code. Recommendations: At the moment, there ...

PT-2023-13561 · Hewlett Packard · Hpe Serviceguard

Name of the Vulnerable Software and Affected Versions: HPE Serviceguard affected versions not specified Description: The issue concerns pre-auth memory corruption in HPE Serviceguard. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

K76594024: libidn vulnerability CVE-2017-14062

Security Advisory Description Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. CVE-2017-14062 Impact This vulnerability may allow attackers to cause a denial of...

K17125: Multiple Java vulnerabilities

Security Advisory Description CVE-2015-0458 Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. CVE-2015-0459 Unspecified vulnerability in Oracle Java SE 5.0u8...