PT-2023-8401 · Unknown +5 · Dns Server +5

Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue is caused by an improper check for RDLENGTH overflow in the buffer in response from the DNS server. This can lead to a buffer overflow. The vulnerability is related to...

PT-2023-9344 · Unknown · Tinode Chat

Name of the Vulnerable Software and Affected Versions: Tinode Chat affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Tinode Chat, allowing a remote attacker to conduct cross-site scripting attacks by injecting specially crafte...

PT-2023-30804 · Softnext · Softnext Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to a path traversal vulnerability within a specific URL parameter. This allows an unauthenticated remote attacker to bypass authentication and download...

PT-2023-27319 · Silicon · Silicon Labs Trustzone

Name of the Vulnerable Software and Affected Versions: Silicon Labs TrustZone implementation affected versions not specified Description: The issue is related to an unvalidated input in a library function that handles communication between secure and non-secure memory in the Silicon Labs TrustZon...

PT-2023-32699 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which are then executed by the user's browser. No...

PT-2023-36078 · Repox · Repox

Name of the Vulnerable Software and Affected Versions: Repox affected versions not specified Description: An authentication bypass issue has been found, allowing a remote user to send a specially crafted POST request to alter or create users due to the lack of any authentication method...

PT-2023-9242 · Unknown · Masterscada 4D

Name of the Vulnerable Software and Affected Versions: MasterSCADA 4D affected versions not specified Description: The issue is related to incorrect restriction of access to a directory with limited access in the MasterSCADA 4D SCADA system. Exploitation of this issue may allow a remote attacker ...

PT-2023-8028

Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description The issue is due to insufficient input validation in Microsoft Defender. An attacker can exploit this to cause a denial of service using specially crafted input. Recommendations At...

PT-2023-7867 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Cloud Files Mini Filter driver, which can be exploited to elevate privileges. This could...

PT-2023-7676 · Microsoft · Windows Sysmain Service +1

Name of the Vulnerable Software and Affected Versions: Windows Sysmain Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Sysmain Service, allowing an attacker to potentially elevate their privileges. This could impact the...

PT-2023-7618 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This allows a remote attacker to execute arbitrary cod...

PT-2023-7607 · Microsoft · Power Platform Connector

Name of the Vulnerable Software and Affected Versions: Microsoft Power Platform Connector affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow a remote attacker to conduct a spoofing attack by sendi...

PT-2023-35628 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in the Apache POI library, specifically in the org.apache.poi.hdgf.streams package. The crash is related to the findChunks and findChildren methods in the...

PT-2023-32555 · Bcb · Bcb

Name of the Vulnerable Software and Affected Versions: BCB affected versions not specified Description: The issue is related to an oversight in BCB handling of reboot reason, allowing for persistent code execution. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-30845 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot vulnerability that results in persistent code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

PT-2023-21869 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab affected versions not specified Description: The issue concerns a session forgery problem. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2023-30844 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device. Recommendations: At the moment, there is no information about a newer versio...

PT-2023-32586 · Unknown · Sound Booster

Name of the Vulnerable Software and Affected Versions: Sound Booster affected versions not specified Description: The issue concerns a permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerability may cause features to perform...

PT-2023-28504 · Wifi · Wifi

Name of the Vulnerable Software and Affected Versions: Wifi service affected versions not specified Description: The issue is related to a possible missing permission check in the wifi service. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2023-24183 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Firmware when it processes a FTMR frame. Recommendations: At the moment, there is no information about a newer...