CVE-2023-23463 Sunell DVR – Insufficiently Protected Credentials

Sunell DVR, latest version, Insufficiently Protected Credentials CWE-522 may be exposed through an unspecified request...

Sunell DVR 安全漏洞

Sunell DVR is a series of digital video recorders from Sunell. A security vulnerability exists in Sunell DVR that stems from the device not adequately protecting credentials, which could be exploited by an attacker to disclose credentials via an unspecified request...

PT-2023-18976 · Unknown · Media Cp Media Control Panel

Name of the Vulnerable Software and Affected Versions: Media CP Media Control Panel latest version Description: The issue concerns a reflected XSS that can be executed through an unspecified endpoint. There is no information provided about the estimated number of potentially affected devices...

PT-2023-1624 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to conduct a...

PT-2023-1395 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited by an attacker to execute arbitrary code using a specially crafted file. This can...

PT-2023-1519 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Secure Channel component of the Windows operating system. This can be exploited by a remote attacker to cause a denial o...

PT-2023-1513 · Microsoft · Windows Distributed File System +1

Name of the Vulnerable Software and Affected Versions: Windows Distributed File System DFS affected versions not specified Description: The issue is caused by a buffer overflow in the memory of the Distributed File System component of the Windows operating system. This allows a remote attacker to...

PT-2023-1596 · Microsoft · Windows Media Player +1

Name of the Vulnerable Software and Affected Versions: Windows Media Player affected versions not specified Description: The issue is caused by an integer underflow in the Windows Media Player. It allows remote attackers to execute arbitrary code and affect the system. This can potentially lead t...

PT-2023-1447 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited by a remote attacker to cause a denial of service. Recommendations: ...

PT-2023-1452 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: The issue is related to incorrect cleanup or release of resources in the .NET Framework, which can be exploited to cause a denial of service. This allows an attacker to affect the...

PT-2023-8998 · Microsoft · Sql Server Integration Services

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Integration Service VS extension affected versions not specified Description: The issue is related to insufficient input validation in the SQL Server Integration Services SSIS software, which can be exploited to execute...

PT-2023-13343 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN Host while parsing frame information. Recommendations: At the moment, there is no...

Fedora 37 : opusfile (2023-6d18f920d2)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6d18f920d2 advisory. Add upstream fix for CVE-2022-47021 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

PT-2023-12814 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read that occurs while performing the checksum of a received packet. Recommendations: At the moment, there is ...

PT-2023-13254 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to memory corruption caused by a configuration weakness in the modem when sending commands to write protected files. Recommendations: At the moment, there is no informati...

PT-2023-13247 · Unknown · Trusted Application Environment

Name of the Vulnerable Software and Affected Versions: Trusted Application Environment affected versions not specified Description: The issue is related to memory corruption due to use after free in the trusted application environment. Recommendations: At the moment, there is no information about...

PT-2023-15242 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible missing permission check in the WLAN driver, which could lead to local information disclosure. Recommendations: At the moment, there is no information...

PT-2023-17486 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: ril affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in ril. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-15272 · Unknown · Log Service

Name of the Vulnerable Software and Affected Versions: log service affected versions not specified Description: The issue is related to a missing permission check in the log service, which could lead to a local denial of service. Recommendations: At the moment, there is no information about a new...

PT-2023-15250 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing permission check in the wlan driver, which could lead to local information disclosure. Recommendations: At the moment, there is no information...