PT-2023-22016 · Unknown · Graphql-Java

Name of the Vulnerable Software and Affected Versions: graphql-java versions prior to 20.1 graphql-java versions prior to 19.4 graphql-java versions prior to 18.4 graphql-java versions prior to 17.5 Description: An attacker can send a crafted GraphQL query that causes stack consumption. The issue...

PT-2023-14190 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 15.1 through 15.7.7 GitLab EE versions 15.8 through 15.8.3 GitLab EE versions 15.9 through 15.9.1 Description: An issue has been discovered in GitLab EE. If a group with SAML SSO enabled is transferred to a new namespace as...

PT-2023-21408 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.393 and earlier Jenkins LTS versions 2.375.3 and earlier Jenkins versions prior to LTS 2.387.1 Description: The issue allows attackers with Item/Workspace permission to access the contents of temporary directories related t...

PT-2023-2258 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.270 through 2.393 Jenkins LTS versions 2.277.1 through 2.375.3 Description: The issue is related to errors in handling HTTP headers, which can allow a remote attacker to perform cross-site scripting XSS attacks. The...

PT-2023-16828 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. Thi...

PT-2023-35474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue concerns error handling in the mmc spi probe function. It was introduced in version v2.6.24 and fixed in version v5.4.232. The actual impact and attack plausibility have not yet...

PT-2023-6754 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V34.0.254 Parasolid versions prior to V34.1.242 Parasolid versions prior to V35.0.170 Parasolid versions prior to V35.1.150 Solid Edge SE2022 versions prior to V222.0MP12 Description: The issue is related to an out...

PT-2023-16534 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.11 Description: The issue concerns weak password requirements in the GitHub repository thorsten/phpmyfaq. Recommendations: For versions prior to 3.1.11, update to version 3.1.11 or later to resolve the...

PT-2023-2377 · Nextcloud +2 · Nextcloud +2

Name of the Vulnerable Software and Affected Versions: Nextcloud versions 24.0.4 through 24.0.6 Nextcloud versions 25.0.0 Description: The issue is related to improper access control in Nextcloud, a private cloud software. This can allow a remote attacker to gain unauthorized access to limited...

PT-2023-18607 · F5 · F5Os-A +1

Name of the Vulnerable Software and Affected Versions: F5OS-A versions 1.2.0 through 1.2.x F5OS-C versions 1.3.0 through 1.4.x Description: The issue allows for command injection when processing F5OS tenant file names. This may potentially lead to unauthorized access or control. No information is...

PT-2023-24200 · Nextcloud +1 · Nextcloud Calendar +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Calendar app versions prior to 3.5.5 Nextcloud Calendar app versions prior to 4.2.3 Description: The issue concerns the disclosure of internal website paths when the SMTP server is unavailable. This affects the functionality of the...

PT-2023-12937 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify/publify versions prior to 9.2.10 Description: The issue concerns insecure storage of sensitive information in the GitHub repository publify/publify. Recommendations: For versions prior to 9.2.10, update to version 9.2.10 or later to...

PT-2023-15968

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.4 through 15.5.7 GitLab CE/EE versions 15.6 through 15.6.4 GitLab CE/EE versions 15.7 through 15.7.2 Description An issue has been discovered in GitLab CE/EE where GitLab Pages allows redirection to arbitrary protocols...

PT-2023-14250 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below Description: A vulnerability exists in the ClearPass Policy Manager cluster communications, allowing an attacker in a privileged...

PT-2022-28031 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue concerns Business Logic Errors in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...

PT-2022-6269

Name of the Vulnerable Software and Affected Versions Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 and 16.1.2 iPadOS versions prior to 15.7.2 Description A type confusion issue was addressed with improved state handlin...

PT-2022-26616 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 watchOS versions prior to 9.2 Description: An issue existed in the parsing of URLs, whi...

PT-2022-26006 · Daikin · Daikin Svmpc1 +1

Name of the Vulnerable Software and Affected Versions: Daikin SVMPC1 versions 2.1.22 and prior Daikin SVMPC2 versions 1.2.3 and prior Description: The issue allows an attacker to obtain user login credentials and control the system. Recommendations: For Daikin SVMPC1 versions 2.1.22 and prior,...

PT-2022-25100 · Samsung · Samsung Decoding Library

Name of the Vulnerable Software and Affected Versions: Samsung decoding library versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an integer overflow in the Samsung decoding library, specifically affecting the handling of video thumbnails. This allows a local attacker ...

PT-2022-26049 · Ibm · Ibm Business Process Manager

Name of the Vulnerable Software and Affected Versions: IBM Business Process Manager versions 19.0.0.1 through 19.0.0.3 IBM Business Process Manager versions 20.0.0.1 through 20.0.0.2 IBM Business Process Manager versions 21.0.1 through 21.0.3.1 Description: This issue allows users to embed...