84 matches found
PT-2024-2023 · Microsoft · Wdac Ole Db Provider For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the...
PT-2025-1750 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.6 through 16.9.7 GitLab CE/EE versions 16.10 through 16.10.5 GitLab CE/EE versions 16.11 through 16.11.2 Description: An issue has been discovered in GitLab CE/EE where cross-site request forgery may have been possibl...
PT-2024-1124 · Microsoft +4 · Windows +4
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the libarchive library, which may allow remote attackers to execute arbitrary code. A heap-based out-of-bounds write...
PT-2023-17328 · Unknown · Octopus Server
Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue allows the OpenID client secret to be logged in clear text during the configuration of the server. Recommendations: At the moment, there is no information about a newer...
CVE-2023-35630
Internet Connection Sharing ICS Remote Code Execution Vulnerability...
CVE-2023-46555
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw...
PT-2023-36346 · Sqlite3 · Sqlite3
Name of the Vulnerable Software and Affected Versions: sqlite3 affected versions not specified Description: The issue is related to possible unfixed security issues due to bundled sqlite3. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2023-24951 · Jmarsden · Jsonij
Name of the Vulnerable Software and Affected Versions: jmarsden/jsonij versions 0.5.2 and earlier Description: The issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For versions 0.5.2 and earlier,...
PT-2023-15438 · Hitron · Hitron Coda-5310
Name of the Vulnerable Software and Affected Versions: Hitron CODA-5310 affected versions not specified Description: The issue concerns hard-coded encryption/decryption keys in the program code, allowing a remote attacker authenticated as an administrator to decrypt system files. This access...
PT-2023-14929 · Fp.Io · Fp.Io Vpp
Name of the Vulnerable Software and Affected Versions: FP.io VPP Vector Packet Processor versions 19.04 through 22.10 Description: The issue is related to the generation of a predictable IV with CBC mode. This affects a wide range of versions of the FP.io VPP Vector Packet Processor...
CVE-2023-21706
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-21529
Microsoft Exchange Server Remote Code Execution Vulnerability...
PT-2023-10002 · Unknown · Bricco Authenticator Plugin
Name of the Vulnerable Software and Affected Versions: Bricco Authenticator Plugin versions prior to 1.39 Description: A critical issue was found in the Bricco Authenticator Plugin, affecting the authenticate/compare function of the DBAuthenticator.java file. This issue leads to sql injection...
CVE-2023-21782
3D Builder Remote Code Execution Vulnerability...
PT-2023-1133 · Microsoft · Windows Iscsi Service +1
Name of the Vulnerable Software and Affected Versions: Windows iSCSI Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows iSCSI Service, which can be exploited by a remote attacker to cause a denial of service using specially...
PT-2022-8016 · Itext · Itext Rups
Name of the Vulnerable Software and Affected Versions: iText RUPS affected versions not specified Description: A vulnerability was found in iText RUPS, affecting unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference...
PT-2022-26438 · Hcl +1 · Bigfix Platform
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logge...
PT-2022-35477 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns an out-of-bounds read in the adp5061 get chg type function. This problem has the potential to be a security vulnerability, although its actual impact and the likelihood ...
PT-2022-25144 · Owasp +1 · Owasp Modsecurity Core Rule Set +1
Name of the Vulnerable Software and Affected Versions: OWASP ModSecurity Core Rule Set CRS versions 3.0.x through 3.3.2 Description: The issue concerns a response body bypass in the OWASP ModSecurity Core Rule Set CRS. A client can exploit this by issuing an HTTP Accept header field with an...
