PT-2023-8977 · Grafana +3 · Grafana +3

Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue is related to a weakness in the authentication mechanism of Grafana, specifically with the verify email enabled option. This option only validates email addresses during the sign-...

PT-2023-35570 · Unknown · Heifcontext

Name of the Vulnerable Software and Affected Versions: HeifContext affected versions not specified Description: The issue is related to a crash in the HeifPixelImage overlay function, specifically in the HeifContext decode overlay image and decode image planar functions. Recommendations: At the...

PT-2023-32169 · Moodle +7 · Moodle +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the need for stronger revision number limitations on file serving endpoints to enhance cache poisoning protection. This is a measure ...

PT-2023-8911 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to an XSS risk in the course upload preview, which can be exploited when users upload unsafe data. This can allow a remote attacker to perform cross-site scripting...

PT-2023-28858 · Unknown · Oemsmi Driver

Name of the Vulnerable Software and Affected Versions: OemSmi driver affected versions not specified Description: A potential issue was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code. Recommendations: ...

PT-2023-30185 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the vulnerability of input parameters not being strictly verified. Successful exploitation of this vulnerability may cause the launch...

PT-2023-8699 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! affected versions not specified Description: The issue is related to inadequate parsing of URLs, which could result in an open redirect. This means that an attacker, acting remotely, could potentially redirect a user to an arbitrary...

PT-2023-28856 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer over-read was reported in the LemSecureBootForceKey module that may allow a local attacker with elevated privileges to disclose sensitive information...

PT-2023-6890

Name of the Vulnerable Software and Affected Versions PostgreSQL affected versions not specified Description A memory disclosure issue was found in PostgreSQL, allowing remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. This...

PT-2023-28855 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the LemSecureBootForceKey module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At th...

PT-2023-31004 · Lenovo · Lenovo View Driver

Name of the Vulnerable Software and Affected Versions: Lenovo View driver affected versions not specified Description: A potential use-after-free issue was reported in the Lenovo View driver, which could result in denial of service. Recommendations: At the moment, there is no information about a...

PT-2023-9646 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to improper handling of frames with VLAN tag information, which could allow an unauthenticated, adjacent attacker to cause a denial of service DoS conditi...

PT-2023-35568 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash involves the function cmsIT8GetDataRowColDbl and is related to the file cms cgats fuzzer.c. ...

PT-2023-28865 · Lenovo · Reflash

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the ReFlash module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment, ther...

PT-2023-30310 · Unknown · Urbackup Server

Name of the Vulnerable Software and Affected Versions: UrBackup Server version 2.5.31 Description: The issue allows for brute-force enumeration of user accounts. This is possible because a failure message confirms when a username is not valid. Recommendations: For UrBackup Server version 2.5.31,...

PT-2023-28542 · Arm · Arm 5Th Gen Gpu Architecture Kernel Driver +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. Recommendations: At the moment, there is no information about...

PT-2023-24163 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Firmware. It occurs when the firmware receives a beacon that includes a T2LM Information Element IE. There is no...

PT-2025-18884 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a DMA memory leak in the Linux kernel, specifically in the scsi: mpi3mr component. A fix has been implemented to address the problem, which was related to device...

PT-2023-24162 · Qualcomm · Snapdragon +133

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the audio component when a callback function in the driver is invoked from the ADSP. Recommendations: At the moment, there is no information...

PT-2023-7098 · Unknown · Dubai Module

Name of the Vulnerable Software and Affected Versions: Dubai Module affected versions not specified Description: The issue is related to a Use-After-Free UAF vulnerability in the dubai module, which can affect availability upon successful exploitation. This vulnerability is associated with the us...