PT-2023-6655 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to V223.0Update2 Description: A heap-based buffer overflow vulnerability has been identified in the affected application while parsing specially crafted PAR files...

PT-2023-3252 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0006 Description: The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code ...

PT-2023-6674 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to V223.0Update2 Description: A use-after-free issue has been identified in the affected application, which can be triggered while parsing specially crafted STP...

HPESBGN04446 rev.2 - HPE Intel 500 Series Ethernet Controllers, INTEL-SA-00750, Intel Ethernet VMware Drivers Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port 560FLR-SFP+ Adapter -Prior to 1.12.3.0 HPE Ethernet 10Gb 2-port 560SFP+ Adapter -Prior to 1.12.3.0 HPE Ethernet 10Gb 2-port...

PT-2023-35013 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential issue exists in the Linux Kernel, specifically in the sch taprio component of the net/sched module. The problem is related to a possible use-after-free scenario. The actual impact...

PT-2023-20000 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimCore version 10.5.15 Description: The issue is related to an improper SameSite Attribute, which allows attackers to execute arbitrary code. Recommendations: For pimCore version 10.5.15, update to a version that fixes the improper SameSite...

PT-2023-34975 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v6.1.8 Description: The issue is related to a use-after-free of a listening socket. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14 throu...

PT-2023-35365 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.305 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2023-34971 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to the x86/i8259 legacy PIC interrupts, which are marked with IRQ LEVEL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35122 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: The issue concerns a potential array out-of-bound in the add secret dac path function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35222 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.166 Description: The issue is related to a potential security problem in the cifs component, where an oops occurs due to an uncleared server-smbd conn in reconnect. The actual impact and attack plausibilit...

PT-2023-35083 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been fully determined...

PT-2023-35155 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to race conditions in the l2tp tunnel register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35108 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: A memory leak issue was discovered in the Linux Kernel, specifically in the irqdomain.c file, related to the use of debugfs lookup. The actual impact and attack plausibility have not yet be...

PT-2023-34969 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.10 Description: The issue is related to the bpf in the Linux Kernel, specifically in the send signal common function, where a task with pid=1 is skipped. The actual impact and attack plausibility have not y...

PT-2023-16115 · WordPress · Enable Media Replace

Name of the Vulnerable Software and Affected Versions: Enable Media Replace WordPress plugin versions prior to 4.0.2 Description: The issue allows authors to upload arbitrary files to the site, potentially enabling them to upload PHP shells on affected sites. Recommendations: For Enable Media...

PT-2023-18218 · Unknown · One Hand Operation

Name of the Vulnerable Software and Affected Versions: One Hand Operation + versions prior to 6.1.21 Description: The issue allows multiple users to access the owner's widget without authorization via the gesture setting, due to a missing authorization vulnerability. Recommendations: For versions...

Design/Logic Flaw

Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There a...

PT-2023-14600 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site Scripting XSS...

PT-2023-14000 · Seosamba · Seosamba For Wordpress Webmasters

Name of the Vulnerable Software and Affected Versions: SeoSamba for WordPress Webmasters plugin versions 1.0.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...