PT-2023-16832 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to injec...

PT-2023-15689 · Sophos · Sophos Connect

Name of the Vulnerable Software and Affected Versions: Sophos Connect versions prior to 2.2.90 Description: An information disclosure issue allows sensitive key material to be included in technical support archives. Recommendations: For Sophos Connect versions prior to 2.2.90, update to version...

PT-2023-12192 · Izimodal · Izimodal

Name of the Vulnerable Software and Affected Versions: iziModal versions prior to 1.6.1 Description: The issue arises when handling untrusted modal titles, allowing an attacker to influence the title field and supply arbitrary html or javascript code. This code will be rendered in the context of ...

CLSA-2023-1676571280 Update of ca-certificates

Update to CKBI 2.60 from NSS 3.86 - Removed: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "DST Root CA X3" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "GlobalSign Root CA - R2" - Certificate "Staat der...

PT-2023-1717 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Linux versions prior to 4.17 Description: The issue is related to incorrect default permissions in the software installer for some IntelR QAT drivers, which may allow an authenticated user to potentially enable escalati...

SUSE CVE-2021-41092

Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json listing a credsStore or credHelpers that could not be...

PT-2023-1642 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 22.0.8 and earlier Adobe Animate versions 23.0.0 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitati...

PT-2023-5950 · Git · Git

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.39.2 Description: The issue is related to the execution of untrusted code when gitk is run on Windows. This can be exploited through social engineering to trick users into running untrusted code. The proble...

Zuken Elmic KASAGO uses insufficient random values for TCP Initial Sequence Numbers

Overview Zuken Elmic KASAGO, TCP/IP protocol stack for embedded systems, uses its own random number generator function when generating TCP initial sequence numbers, which leads to use insufficient random values CWE-330. Zuken Elmic reported this vulnerability to JPCERT/CC to notify users of its...

PT-2023-34957 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue involves replacing 0/1 with false/true in BIC APIs. It is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack...

PT-2023-16052 · Pickplugins · Product Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Product Slider for WooCommerce by PickPlugins WordPress plugin versions prior to 1.13.42 Description: The issue concerns a failure to validate and escape certain shortcode attributes, which could allow users with the contributor role and...

PT-2023-35137 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to the i2c designware component in the Linux Kernel, where a potential overflow can occur due to incorrect clock multiplication. The actual impact and attack plausibili...

PT-2023-35014 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential buffer overflow issue exists in the rndis wlan component of the Linux Kernel. The issue is related to the rndis query oid function. This problem was introduced in version v2.6.35...

PT-2023-34816 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.22 through v5.15.89 Description: A race condition exists between quota rescan and disable, potentially leading to a NULL pointer dereference. The actual impact and attack plausibility have not yet been proven...

PT-2023-34797 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a pci device refcount leak in the ixgbe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-16362 · WordPress · Contentstudio

Name of the Vulnerable Software and Affected Versions: ContentStudio plugin for WordPress version 1.2.5 and earlier Description: The issue is related to an authorization bypass due to an unsecure token check that is susceptible to type juggling. This allows unauthenticated attackers to execute...

PT-2023-14422 · Riverbed · Riverbed Aternity

Name of the Vulnerable Software and Affected Versions: Riverbed Aternity versions prior to 12.1.4.27 Description: The issue is related to incorrect access control in the Aternity agent, allowing for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM...

PT-2023-15337 · WordPress · Fluentauth

Name of the Vulnerable Software and Affected Versions: FluentAuth WordPress plugin versions prior to 1.0.2 Description: The issue allows an attacker to bypass IP-based blocks set by the plugin. This is possible because the plugin prioritizes getting a visitor's IP address from certain HTTP header...

PT-2023-4727 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.1331 Description: The issue is related to a heap-based buffer overflow in the vim text editor, specifically concerning the utfc ptr2len function, which can lead to an out-of-bounds operation in memory. Exploitation o...

PT-2023-33127 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a race condition with cookie lru and use cookie. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...