PT-2023-25997 · Unknown · Unica Platform

Name of the Vulnerable Software and Affected Versions: Unica Platform affected versions not specified Description: A Persistent Cross-site Scripting XSS issue can be carried out on certain pages, allowing an attacker to hijack a user's session and perform other attacks. Recommendations: At the...

PT-2023-5011 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: CODESYS versions affected versions not specified Description: The issue is related to insufficient input validation in the CMPappBP component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of servic...

PT-2023-12744 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows a low-privileged guest user to craft a request that enables enumeration or reconnaissance of an environment. Recommendations: At the moment, there is no information...

PT-2023-6403 · Procps Ng +11 · Procps-Ng +11

Name of the Vulnerable Software and Affected Versions: procps-ng versions affected versions not specified Description: The issue is related to a buffer overflow in the procps-ng utility, specifically in the "ps" utility, which allows a user to write almost unlimited amounts of unfiltered data int...

PT-2023-20627 · Open Xchange · Open-Xchange Appsuite

Name of the Vulnerable Software and Affected Versions: Open-Xchange App Suite affected versions not specified Description: Attackers with access to user accounts can inject arbitrary control characters to SIEVE mail-filter rules. This could be abused to access SIEVE extension that are not allowed...

PT-2023-9277 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to disclose protected information or cause a denial of service...

PT-2023-25835 · Tadiran Telecom · Tadiran Telecom Aeonix

Name of the Vulnerable Software and Affected Versions: Tadiran Telecom Aeonix affected versions not specified Description: The issue is related to an observable response discrepancy, which is a type of security flaw. This discrepancy can potentially be exploited. Recommendations: At the moment,...

PT-2023-21480 · Hcl · Hcl Bigfix Mobile

Name of the Vulnerable Software and Affected Versions: HCL BigFix Mobile affected versions not specified Description: The issue allows an authenticated attacker to inject malicious scripts into the application through a cross-site scripting attack. Recommendations: At the moment, there is no...

PT-2023-7954 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. The specific flaw exists within the HTTP service...

PT-2023-8781 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to an insufficient comparison in the SolarWinds Platform, which is a software for network monitoring and IT infrastructure management. This allows a remote...

PT-2023-18597 · Rockwell Automation · Kinetix 5700 Dc Bus Power Supply Series A

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A affected versions not specified Description: The issue concerns a vulnerability to CIP fuzzing, which affects the establishment of new ENIP connections. If impacted, this...

PT-2023-25343 · Mattermost · Mattermost Boards

Name of the Vulnerable Software and Affected Versions: Mattermost Boards affected versions not specified Description: The issue is related to the improper validation of a board link in Mattermost Boards, which allows an attacker to crash a channel by posting a specially crafted boards link...

PT-2023-25327 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue is related to Mattermost failing to properly validate the origin of a websocket connection. This allows a Man-In-The-Middle MITM attacker on Mattermost to access the websocket...

PT-2023-26285 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2023-26289 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2023-4012 · Unisoc · Unisoc Bluetooth Service

Name of the Vulnerable Software and Affected Versions: Unisoc bluetooth service affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Unisoc bluetooth service microprogram. It is caused by a race condition that can lead ...

PT-2023-23046 · Dmservice · Dmservice

Name of the Vulnerable Software and Affected Versions: DMService affected versions not specified Description: The issue is related to a possible missing permission check in DMService, which could lead to local escalation of privilege with no additional execution privileges. Recommendations: At th...

PT-2023-3859 · Microsoft · Windows Cng Key Isolation Service +1

Name of the Vulnerable Software and Affected Versions: Windows CNG Key Isolation Service affected versions not specified Description: The issue is related to a race condition in the Windows operating system. It allows an attacker to elevate privileges in the system. This can affect the system,...

PT-2023-3476 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings of the SmartScreen component, which is part of Windows operating systems. It allows a remote attacker to bypass security...

PT-2023-3814 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Update Orchestrator Service of the Windows operating system. This vulnerability ca...