PT-2023-28224 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-35997 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash was reported due to a Memcpy-param-overlap issue. The crash state includes repeat, repeat, and p ere. No information is available about the estimated number of potentially...

PT-2023-5472

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Ventura versions prior to 13.6 watchOS versions prior to 9.6.3 watchOS versions prior to 10.0.1 Description A certificate validation issue was addressed, which may allow a maliciou...

PT-2023-36254 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: amazon-ecs-init affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The update of amazon-ecs-init is intended to address this issue by rebuilding the package wi...

PT-2023-27398 · Digita Information Technology · Smartrise Document Management System

Name of the Vulnerable Software and Affected Versions: Digita Information Technology Smartrise Document Management System versions prior to Hvl-2.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This...

PT-2023-22913 · Unknown · Settings Suggestions

Name of the Vulnerable Software and Affected Versions: Settings Suggestions versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper input validation, which allows attackers to launch arbitrary activity. Recommendations: For versions prior to SMR Sep-2023 Release 1,...

PT-2023-22927 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the LocalProvider of Gallery, allowing an attacker to access data in the content provider. Recommendations: For versions prior to 14.5.01.2,...

PT-2023-22933 · Google · Android 11 +3

Name of the Vulnerable Software and Affected Versions: Camera versions prior to 11.0.16.43 in Android 11 Camera versions 12.0.07.53 through 12.1.03.10 in Android 12 Camera versions 13.0.01.43 through 13.1.00.83 in Android 13 Description: The issue allows a local attacker to access specific files...

PT-2023-36255 · Buildah +1 · Buildah +1

Name of the Vulnerable Software and Affected Versions: buildah affected versions not specified Description: The issue is related to a security release in go 1.21. The update of buildah rebuilds the package with this security release. No information is provided about the estimated number of...

PT-2023-23595 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Recommendations: At the moment, there is no information about a newer...

PT-2023-27316 · Devaldi · Flowpaper Plugin

Name of the Vulnerable Software and Affected Versions: Devaldi Ltd flowpaper plugin versions = 1.9.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Devaldi Ltd flowpaper plugin. This vulnerability requires authentication and is limited to use...

PT-2023-26901 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to multiple CSRF CWE-352 problems. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2023-17676 · Stc · Stc

Name of the Vulnerable Software and Affected Versions: stc affected versions not specified Description: The issue is related to a possible out of bounds read due to a race condition in stc. This could lead to local escalation of privilege, with System execution privileges needed. User interaction...

PT-2023-26132 · General Solutions Steiner Gmbh · Case 3 Taskmanagement

Name of the Vulnerable Software and Affected Versions: General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.message parameter...

PT-2023-25420 · Smanga · Smanga

Name of the Vulnerable Software and Affected Versions: smanga versions 3.1.9 and earlier Description: The issue allows remote attackers to execute arbitrary code and gain sensitive information. This is achieved via the mediaId, mangaId, and userId parameters in the "php/history/add.php" endpoint...

PT-2023-19891 · Unknown · Oauth Twitter Feed For Developers

Name of the Vulnerable Software and Affected Versions: oAuth Twitter Feed for Developers plugin versions = 2.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the oAuth Twitter...

PT-2023-25536 · Relic · Relic

Name of the Vulnerable Software and Affected Versions: RELIC versions before commit 34580d840469361ba9b5f001361cad659687b9ab Description: The issue allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling the realloc function in the bn grow...

PT-2023-33022 · Tss-Lib · Tss-Lib

Name of the Vulnerable Software and Affected Versions: tss-lib affected versions not specified Description: The GG18 threshold ECDSA signature protocol specification contains an issue that allows an attacker to recover the shared secret key. This can occur when a participant generates a Paillier...

PT-2023-5771 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 32047 Description: The issue is related to sensitive information disclosure due to missing authorization. This may allow an attacker to gain unauthorized access to protected information. Recommendations:...

PT-2023-30068 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository instantsoft/icms2. Recommendations: For versions prior to 2.16.1-git, update to version...