PT-2023-28955 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the name parameter, potentially leading to unauthorized execution of scripts...

PT-2023-28941 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the PACKING SLIPS SUMMARY TITLE1 parameter. This could potentially lead to...

PT-2023-21795 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. This can potentially lead to unspecified consequences. There is no information provided...

PT-2023-24567 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local information disclosure with no additional execution privileges. Recommendations:...

PT-2023-24145 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon processors affected versions not specified Description: The issue is related to memory corruption in Graphics while processing user packets for command submission. This can potentially lead to security risks, but specific...

PT-2023-26432 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to a local denial of service with no additional execution privileges. Recommendations: At...

PT-2023-4338 · Softing · Softing Edgeaggregator

Name of the Vulnerable Software and Affected Versions: Softing edgeAggregator affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this issue, where th...

PT-2023-15867 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "ticket template watchers" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitra...

PT-2023-4296 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ in Windows operating systems. This can be exploited by a remote attacker to...

PT-2023-4292 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visio, which is part of Microsoft Office and 365 Apps for Enterprise. This can allow an attacker to execute...

PT-2023-4969 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Teams, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no informati...

PT-2023-5712 · Mediatek · Mediatek Wlan Service

Name of the Vulnerable Software and Affected Versions: MediaTek WLAN service affected versions not specified Description: The issue is related to a possible out of bounds write in the wlan service due to improper input validation. This could lead to local escalation of privilege with System...

PT-2023-25726 · F5 · Big-Ip Edge Client

Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client for Windows and macOS affected versions not specified Description: An insufficient verification of data issue exists that may allow an attacker to modify the configured server list. Note that software versions which have...

PT-2023-12721 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows a low privileged guest user to interact with extension endpoints. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

PT-2023-3492 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is no information about a...

PT-2023-22790 · Unknown · Systems Manager

Name of the Vulnerable Software and Affected Versions: Systems Manager affected versions not specified Description: A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2023-3818 · Microsoft · Windows Postscript Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Windows PostScript Printer Driver Pscript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to information disclosure. It may allow an attacker to gain unauthorized access to protected information...

PT-2023-3532 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the OLE Automation technology of Windows operating systems. This can allow a remote attacker to gain unauthorized access ...

PT-2023-18304 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is related to memory corruption in Linux when the file upload API is called with parameters having large buffer. Recommendations: At the moment, there is no information about a newe...

PT-2023-36174 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: terraform-provider-aws affected versions not specified Description: The issue is related to a security release in Go 1.19, which is used to rebuild the terraform-provider-aws package. Recommendations: At the moment, there is no information...