PT-2023-24695 · Apache · Apache Any23

Name of the Vulnerable Software and Affected Versions: Apache Any23 affected versions not specified Description: The use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-20563 · Coretec 4 · Coretec 4

Name of the Vulnerable Software and Affected Versions: CoreTec 4 affected versions not specified Description: A vulnerability exists that can be exploited by an authenticated client connected to the same network segment as the system, with any level of access from VIEWER to ADMIN. The attacker ca...

PT-2023-15822 · Unknown · Secure Os Module

Name of the Vulnerable Software and Affected Versions: Secure OS module affected versions not specified Description: The issue is related to configuration defects in the secure OS module. Successful exploitation of this defect will affect availability. Recommendations: At the moment, there is no...

PT-2023-15819 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Default desktop software affected versions not specified Description: The issue allows bypassing of the default desktop security controls, potentially leading to unauthorized modifications to the desktop. Recommendations: At the moment, there...

PT-2023-3180 · Microsoft · Windows Bus Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bus Filter Driver affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Bus Filter driver of Windows operating systems. This can allow an attacker to...

PT-2023-3537 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a memory buffer overflow in Microsoft Office, which can allow an attacker to execute arbitrary code. There is no information about the estimated number of...

PT-2023-18569 · Danfoss · Danfoss Ak-Em100

Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns the storage of login credentials in cleartext. This means that the credentials are not encrypted, potentially allowing unauthorized access. No information is...

PT-2023-20357 · Danfoss · Danfoss Ak-Em100

Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address,...

PT-2023-22370 · Vade Secure · Vade Secure Gateway

Name of the Vulnerable Software and Affected Versions: Vade Secure Gateway affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. This enables the attacker to perform...

PT-2023-17600 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in vcu. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-18321 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the WLAN Firmware. It occurs while processing received beacon or probe response frames. Recommendations: At the moment,...

PT-2023-15768 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service, which could lead to a local denial of service with no additional execution privileges...

PT-2023-15790 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a possible missing permission check in the telephony service, which could lead to a local denial of service with no additional execution privileges...

PT-2023-17608 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible out of bounds write due to improper locking, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and...

PT-2023-3368 · Huawei · Huawei Desktop

Name of the Vulnerable Software and Affected Versions: Huawei desktop affected versions not specified Description: The issue is related to spoofing trustlists, which can be exploited to hide app icons on the desktop, preventing them from being uninstalled. This can be achieved by bypassing...

PT-2023-12603 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by addition overflow in the video framework. Successful exploitation may affect availability. Recommendations: At the moment, there...

PT-2023-2994 · Vmware · Vmware Aria Operations

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations affected versions not specified Description: The issue is related to a deserialization vulnerability in VMware Aria Operations. A malicious actor with administrative privileges can exploit this vulnerability to execute...

PT-2023-2698 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Pragmatic General Multicast PGM protocol in Windows operating systems, specifically due to insufficient input validation. This can be...

PT-2023-13286 · Unknown · Eva Kernel

Name of the Vulnerable Software and Affected Versions: EVA kernel affected versions not specified Description: The issue is related to memory corruption due to improper validation of an array index in computer vision. This occurs when testing the EVA kernel without sending any frames...

PT-2023-7434 · Avahi +9 · Avahi +9

Name of the Vulnerable Software and Affected Versions: Avahi affected versions not specified Description: A vulnerability exists in the avahi rdata parse function of Avahi, which is related to a reachable assertion. This issue can be exploited by an attacker to cause a denial of service...