PT-2023-12744 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows a low-privileged guest user to craft a request that enables enumeration or reconnaissance of an environment. Recommendations: At the moment, there is no information...

PT-2023-26347 · Linux Mint +2 · Linuxmint +2

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue is not considered a security issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2023-24376 · Guanzhou Tozed Kangwei Intelligent Technology · Zlts10G

Name of the Vulnerable Software and Affected Versions: Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G version S10G 3.11.6 Description: A Cross-Site Request Forgery CSRF issue allows attackers to takeover user accounts by sending a crafted POST request to the "/goform/goform set cmd process...

Denial Of Service (DoS)

sails is vulnerable to Denial Of Service DoS. The vulnerability exists because the buildRequest function of req.js does not properly ensure all remaining headers are strings, allowing an attacker to cause an application crash by sending a malicious virtual request when sockets are enabled...

Denial Of Service (DoS)

github.com/envoyproxy/envoy is vulnerable to Denial of Service DoS attacks. When the origin header is deleted and removed between decodeHeaders and encodeHeaders, the CORS filter will trigger a segmentation fault and crash the application...

Denial Of Service (DoS)

github.com/envoyproxy/envoy is vulnerable to Denial of Service DoS attacks. When the listener is exhausted, gRPC access logs utilizing its global scope may result in a use-after-free, which allows an authenticated attacker to cause an application crash via a malicious LDS upstream...

PT-2023-36235 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon versions prior to 2.1.7 Description: The issue concerns conmon, where several bugs have been fixed, including leaking symbolic links in the opt socket path directory, oom handling issues, and OOM watcher for cgroupv2 oom kill events. T...

PT-2023-25012 · Woffice · Office

Name of the Vulnerable Software and Affected Versions: eoffice versions prior to 9.5 Description: An arbitrary file upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For versions prior to 9.5, update to version 9.5 or later to resolve the issue...

PT-2023-4949

Name of the Vulnerable Software and Affected Versions Certifi versions prior to 2023.07.22 Description The issue is related to the recognition of "e-Tugra" root certificates by Certifi, a collection of Root Certificates for validating SSL certificates. e-Tugra's root certificates were subject to ...

PT-2023-25700 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions 4.0.0 through 4.9.41 Contao versions 4.13.0 through 4.13.27 Contao versions 5.0.0 through 5.1.9 Description: Contao is an open source content management system. It is possible for untrusted backend users to inject malicious co...

PT-2023-4081 · Abb · Abb Ability Zenon

Name of the Vulnerable Software and Affected Versions: ABB Ability zenon versions 11 build through 11 build 106404 Description: A vulnerability exists in the ABB Ability zenon system, allowing low-privileged users to read and update data in various directories. This issue can be exploited by...

PT-2023-26564 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further details are provided about the issue. Recommendations: At t...

Authorization Bypass

gitlab is vulnerable to Authorization Bypasses. A business logic error in Project Import under certain conditions may show an unauthorized user in the Access Granted column in the project membership pages, which allows an authenticated attacker to bypass authorizations...

PT-2023-5924 · Hitachi +3 · Hitachi Jp1/Performance Management - Remote Monitor For Oracle +29

Name of the Vulnerable Software and Affected Versions: Hitachi JP1/Performance Management - Manager versions 09-00 through 12-50-06 Hitachi JP1/Performance Management - Base versions 09-00 through 10-50- Hitachi JP1/Performance Management - Agent Option for Application Server versions 11-00 throu...

PT-2023-26038 · Unknown · Office Suite Premium

Name of the Vulnerable Software and Affected Versions: Office Suite Premium Version v10.9.1.42602 Description: A reflected cross-site scripting XSS issue was found, which can be exploited via the id parameter at the "/api?path=profile" API endpoint. Recommendations: For Office Suite Premium Versi...

PT-2023-23800 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS versions prior to 2208 9.3.2102 Description: The issue allows an unauthenticated malicious user with local access to the device to read sensitive information written to the log files. Recommendations: For Dell Wyse ThinOS...

CVE-2023-34035

Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestMatchersString and multiple servlets, one of them being Spring MVC’s DispatcherServlet. DispatcherServlet is a Spring...

PT-2025-20746

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5 Description The issue was...

PT-2025-20766

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 and versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5...

PT-2025-20759

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iPadOS versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18...