PT-2023-12373 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...

PT-2023-16496 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is related to Cross-site Scripting XSS, a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user'...

PT-2023-35904 · Git · Git

Name of the Vulnerable Software and Affected Versions: Git affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the git oid raw cmp function, which is called by commit graph parse oid lookup and git commit graph file parse...

PT-2023-35869 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: isvce write coeff4x4 cavlc,...

PT-2023-13023 · Bestechnic · Bestechnic Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Bestechnic Bluetooth Mesh SDK BES2300 version 1.0 Description: A buffer overflow issue can be triggered during provisioning due to the lack of a check for the SegN field of the Transaction Start PDU. This occurs because there is no validation...

PT-2023-14823 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2023-14859 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2023-14856 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2023-12906 · Citrix +1 · Access Gateway +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an unauthenticated denial of service. There is no information provided about the estimated number of potentially affected device...

.NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to...

GHSA-8F7F-VQG5-JRV9 .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to...

PT-2023-18280 · Unknown +1 · Remote Procedure Call (Rpc) Runtime +1

Name of the Vulnerable Software and Affected Versions: Remote Procedure Call Runtime affected versions not specified Description: A denial-of-service issue allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not available. There is no informati...

PT-2023-2184 · Zoom +1 · Zoom Rooms +3

Name of the Vulnerable Software and Affected Versions: Zoom for Windows clients versions 5.13.2 and earlier Zoom Rooms for Windows clients versions 5.13.4 and earlier Zoom VDI for Windows clients versions 5.13.0 and earlier Description: The issue is related to an information disclosure...

CVE-2022-43526

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

PT-2022-27940 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue. It appears to be a notification about a candidate number that is not in use. Recommendations: At the...

PT-2022-9333 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

CVE-2022-45414

If a Thunderbird user quoted from an HTML email, for example by replying to the email, and the email contained either a VIDEO tag with the POSTER attribute or an OBJECT tag with a DATA attribute, a network request to the referenced remote URL was performed, regardless of a configuration to block...

CVE-2022-31742

An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between invalid key handles and cross-origin key handles. This could have led to cross-origin account linking in violation of WebAuthn goals. This vulnerability affec...

CVE-2022-31739

When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.This bug only affects Firefox for Windows. Other operating systems are unaffected.. This...

PT-2024-41063 · Alt Linux +1 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue has been rejected or withdrawn by its CVE Numbering Authority because it is unused. No further details are available about the issue. Recommendations: At the moment...