PT-2023-5053 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the Microsoft Exchange Server, allowing a remote attacker to conduct spoofing attacks. This can...

PT-2023-29988 · Canonical +1 · Gitlab

Name of the Vulnerable Software and Affected Versions: No information available Description: No details are provided about the issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2023-36003 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-28251 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-5834 · Unknown · Asset Suite Eam

Name of the Vulnerable Software and Affected Versions: Asset Suite EAM versions affected versions not specified Description: A vulnerability exists in the Equipment Tag Out authentication when configured with Single Sign-On SSO and password validation. This issue allows an authenticated user to...

PT-2023-26434 · Unknown · Vowifiservice

Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice, which could lead to a local denial of service with no additional execution privileges. Recommendations: A...

PT-2023-13811 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to memory corruption due to a buffer over-read in the Modem while processing the SetNativeHandle RTP service. This can potentially lead to security risks. The estimated...

PT-2023-5689 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to the use of a weak encryption mechanism when sending 5G messages in the SMS message module. This may allow a remote attacker to impact the confidentiality of...

PT-2023-28783 · Broadcom · Broadcom Raid Controller

Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data. The keys used for encryption are accessible to any local user on Windows...

PT-2023-26919 · Unknown · Usb Service

Name of the Vulnerable Software and Affected Versions: USB Service module affected versions not specified Description: The issue concerns a system file information leakage in the USB Service module. Successful exploitation may affect confidentiality. Recommendations: At the moment, there is no...

PT-2023-18918 · Hcl · Hcl Dryice Mycloud

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyCloud affected versions not specified Description: The issue is related to the use of a broken cryptographic algorithm, which can potentially allow an attacker to compromise the confidentiality and integrity of sensitive...

PT-2023-25735

Name of the Vulnerable Software and Affected Versions Azure Apache Ambari affected versions not specified Description The issue is related to a spoofing vulnerability in Azure Apache Ambari. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2023-4302 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue in Microsoft Excel is related to insufficient input validation, which can allow an attacker to execute arbitrary code. This can be exploited by a remote attacker to impact...

PT-2023-7058

Name of the Vulnerable Software and Affected Versions Alkacon OpenCms versions prior to 10.5.1 Description Remote unauthenticated attackers can obtain sensitive information or execute arbitrary code by sending a specially crafted POST request. This is possible due to improper restriction of XML...

PT-2023-36233 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

PT-2023-35912 · Unknown · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: A security exception occurs in the JavaLanguageParser.expr function, leading to a crash. The issue is related to the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr...

PT-2023-24555 · Unknown · Iwnpi Server

Name of the Vulnerable Software and Affected Versions: iwnpi server affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the iwnpi server. This could lead to local denial of service and requires System execution...

PT-2023-3834 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with insecure privilege management. This vulnerability can be exploited by ...

PT-2023-25853 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: A buffer overflow vulnerability exists in the modem pinctrl module. This issue may impact the integrity and availability of the modem upon successful exploitation. Recommendations: At the...

PT-2023-15842 · Dsoftbus · Dsoftbus

Name of the Vulnerable Software and Affected Versions: DSoftBus affected versions not specified Description: The issue allows a third-party app to obtain a unique value in the DSoftBus module, affecting confidentiality. There is no information provided about the estimated number of potentially...