PT-2023-18332 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core during a syscall for the Sectools Fuse comparison feature. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-19827 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core due to secure memory access by a user while loading a modem image. Recommendations: At the moment, there is no information about a newer versi...

PT-2023-30226 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns unauthorized access. Recommendations: For Online Matrimonial Project version 1.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2023-30208 · Unknown · Easyrecipe

Name of the Vulnerable Software and Affected Versions: EasyRecipe plugin versions = 3.5.3251 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

PT-2023-29343 · Unknown · Seriously Simple Stats

Name of the Vulnerable Software and Affected Versions: Seriously Simple Stats versions 1.5.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-8229 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: The issue in the FFmpeg multimedia library is related to insufficient access control. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment, there is no...

PT-2023-6861 · Google · Google Calendar

Name of the Vulnerable Software and Affected Versions: Google Календарь Google Calendar affected versions not specified Description: The issue is related to insufficient access control in the Google Calendar service. It may allow a remote attacker to gain unauthorized access to the vulnerable...

PT-2023-14742 · Lenovo · Thinkpad

Name of the Vulnerable Software and Affected Versions: ThinkPad affected versions not specified Description: A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models. This could allow an attacker with physical or local access and elevated...

PT-2023-12215 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue allows attackers to execute arbitrary code when malicious images are pulled by isula pull. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-12216 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: When the isula load command is used to load malicious images, attackers can execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2023-12217 · Isula · Isula

Name of the Vulnerable Software and Affected Versions: isula affected versions not specified Description: The issue occurs when the isula export command is used to export a container to an image and the container is controlled by an attacker, allowing the attacker to escape the container...

PT-2023-13422 · Vermeg · Vermeg Agilereporter

Name of the Vulnerable Software and Affected Versions: VERMEG AgileReporter version 21.3 Description: An issue was discovered in the Analysis component, allowing an admin to enter an XSS payload. Recommendations: For VERMEG AgileReporter version 21.3, consider restricting access to the Analysis...

PT-2023-27121 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-27119 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-29903 · Muller Digital · Duplicate Theme Plugin

Name of the Vulnerable Software and Affected Versions: Muller Digital Inc. Duplicate Theme plugin versions 0.1.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actio...

PT-2023-28339 · Dexma · Dexgate

Name of the Vulnerable Software and Affected Versions: The affected product affected versions not specified Description: The issue is related to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a victim user. Recommendations: At th...

PT-2023-29764 · Wipotec Gmbh · Comscale

Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: An issue in WIPOTEC GmbH ComScale allows unauthenticated attackers to login as any user without a password. Recommendations: For versions 4.3.29.21344 and 4.4.12.723,...

PT-2023-29104 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a type confusion vulnerability in the distributed file module. Successful exploitation of this vulnerability may cause the devic...

PT-2023-29112 · Meetme · Meetme

Name of the Vulnerable Software and Affected Versions: MeeTime module affected versions not specified Description: The issue concerns undefined permissions in the MeeTime module, which can impact availability and confidentiality upon successful exploitation. Recommendations: At the moment, there ...

PT-2023-29093 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Security module affected versions not specified Description: The issue concerns the security module where package names' public keys are not being verified. This could potentially affect service confidentiality if successfully exploited...