CVE-2023-29160

Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed...

CVE-2023-33122

A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP, an American company. A security vulnerability exists in the HP PC BIOS. An attacker could exploit the vulnerability to execute arbitrary code, privilege escalation, denial of service, and information disclosure...

PT-2023-13045 · Hewlett Packard · Hp Pc

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of...

PT-2023-22282 · Unknown · Frenic Rhc Loader

Name of the Vulnerable Software and Affected Versions: FRENIC RHC Loader versions 1.1.0.3 and earlier Description: An issue exists due to improper restriction of XML external entity reference XXE, which may lead to the disclosure of sensitive information on the system where the affected product i...

CVE-2022-27541

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2023-35036

In Progress MOVEit Transfer before 2021.0.7 13.0.7, 2021.1.5 13.1.5, 2022.0.5 14.0.5, 2022.1.6 14.1.6, and 2023.0.2 15.0.2, SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

PT-2023-14317 · Hewlett Packard · Hp Bios

Name of the Vulnerable Software and Affected Versions: HP BIOS affected versions not specified Description: A potential Time-of-Check to Time-of-Use TOCTOU issue has been identified in the HP BIOS for certain HP PC products. This may allow for arbitrary code execution, denial of service, and...

Fuji Electric FRENIC RHC Loader Out-of-Bounds Read Vulnerability

Fuji Electric FRENIC RHC Loader is a software tool developed by Fuji Electric Japan for debugging and monitoring inverters, mainly serving the industrial automation field. The Fuji Electric FRENIC RHC Loader suffers from an out-of-bounds read vulnerability, which can be exploited by an attacker t...

Progress Software MOVEit Transfer SQL注入漏洞

Progress Software MOVEit Transfer is a suite of file transfer software from Progress Software, USA. A SQL injection vulnerability exists in Progress Software MOVEit Transfer. An unauthenticated attacker could use this vulnerability to gain unauthorized access to the database, which could be used ...

BMC AMI 路径遍历漏洞

BMC AMI BMC Automated Mainframe Intelligence is an automated mainframe intelligence solution from BMC USA. A security vulnerability exists in BMC AMI. An attacker exploiting this vulnerability could upload and download arbitrary files under certain circumstances, resulting in a denial of service,...

CVE-2023-25912 Webreport disclosure to unauthorized actor in Danfoss AK-EM100

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values...

New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!

Progress Software, the company behind the MOVEit Transfer application, has released patches to address brand new SQL injection vulnerabilities affecting the file transfer solution that could enable the theft of sensitive information. "Multiple SQL injection vulnerabilities have been identified in...

WordPress plugin Brizy Page Builder 数据伪造问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-24790 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

PT-2023-5843 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

The vulnerability of the Teltonika RMS remote management system lies in the fact that enabling the web function from an unreliable source allows a perpetrator to disclose sensitive information and execute arbitrary codes.

The vulnerability of the Teltonika RMS Remote Management System relates to the activation of the web function from an unreliable source. Exploiting this vulnerability allows a malicious actor to disclose sensitive information and execute arbitrary code using a specially crafted web page...

The vulnerability of the ASP.NET Viewstate component of the production process management software ABB eSOMS allows a hacker to disclose protected information.

The vulnerability of the ASP.NET Viewstate component of the ABB eSOMS production process management software is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Unisoc Chipsets 安全漏洞

UNISOC Chipsets are chipsets from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in some Unisoc Chipsets, which stems from a lack of privilege checking. An attacker exploiting this vulnerability could disclose sensitive information. The following chipsets are affected: SC9863A...

PT-2023-17588 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: Wlan affected versions not specified Description: The issue is related to a possible out of bounds read in wlan due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges for...