PT-2023-35864 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as psi device ref finalize, gs gc reclaim, and...

PT-2023-3289 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, requiring user interaction such ...

PT-2023-24381 · Planet Technologies · Wdrt-1800Ax

Name of the Vulnerable Software and Affected Versions: Planet Technologies WDRT-1800AX version v1.01-CP21 Description: The issue allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie. Recommendations: For Planet Technologies WDRT-1800...

PT-2023-13810 · Qualcomm · Qualcomm Basebands

Name of the Vulnerable Software and Affected Versions: Qualcomm basebands affected versions not specified Description: The issue is related to a Transient Denial of Service DOS caused by improper authorization in Modem. It affects Qualcomm basebands and has a high security rating. Recommendations...

PT-2023-22693 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf affected versions not specified Description: An excessively large PDF page size can result in a divide-by-zero in Xpdf's text extraction code. This issue is caused by a very large page size, rather than by a very large character...

PT-2023-23997 · Pydio · Pydio Cells

Name of the Vulnerable Software and Affected Versions: Pydio Cells affected versions not specified Description: The issue allows users to assign arbitrary roles to newly created external users by modifying the HTTP request during the creation process. This can grant access to all cells and...

PT-2023-22410 · Opensc +7 · Opensc +7

Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: A security flaw in OpenSC causes a buffer overrun vulnerability in pkcs15 cardos have verifyrc package. An attacker can supply a smart card package with malformed ASN1 context. The cardos ha...

PT-2023-13464 · Unknown · Shop Beat Media Player

Name of the Vulnerable Software and Affected Versions: Shop Beat Media Player versions 2.5.95 through 3.2.57 Description: The issue is related to Insecure Permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents whe...

PT-2023-35850 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the internal huf decompress, DwaCompressor uncompress, and internal exr undo dw...

PT-2023-20509 · Bwm-Ng · Bwm-Ng

Name of the Vulnerable Software and Affected Versions: bwm-ng affected versions not specified Description: The issue is related to Command Injection due to improper input sanitization in the check function in the bwm-ng.js file. To potentially exploit this, an attacker needs the ability to run...

PT-2023-12605 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by addition overflow in the video framework. Successful exploitation may affect availability. Recommendations: At the moment, there...

PT-2023-12606 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The issue is related to memory overwriting caused by an addition overflow in the video framework. This could potentially affect availability upon successful exploitation...

PT-2023-35848 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state includes functions such as H5MM xstrdup, H5G ent to link, and H5G stab lookup cb. Recommendations: At the moment, there i...

PT-2023-12076 · Unknown · Ingress-Nginx

Name of the Vulnerable Software and Affected Versions: ingress-nginx affected versions not specified Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the...

PT-2023-23262 · Snap One · Snap One Ovrc

Name of the Vulnerable Software and Affected Versions: Snap One OvrC affected versions not specified Description: The issue concerns Snap One OvrC cloud servers, where an attacker can exploit a route to bypass requirements and claim devices outright. No information is provided about the estimated...

PT-2023-35842 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 6 crash has been reported. The crash involves the functions fragment addresses equal, g hash table lookup extended, and fragme...

PT-2023-2805 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE, which could allow an authenticated,...

PT-2023-3781

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central affected versions not specified Description The issue exists due to inadequate protection of the web page structure in Trend Micro Apex Central, allowing for potential exploitation. This could enable a remote attacker ...

PT-2024-11230 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the SLUB redzoning feature in the Linux kernel, which checks for corruption from s-object size instead of s-inuse. This can cause the freelist pointer to be...

PT-2023-19856 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted SKP file in Autodesk products is used to trigger a use-after-free issue. Exploitation of this issue may lead to code execution. Recommendations: At the momen...