PT-2023-35567 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash occurs in the dxf header read and dwg read dxf functions, as indicated by the crash...

PT-2023-30222 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns unauthorized access. Recommendations: For Online Matrimonial Project version 1.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2025-18822 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 component related to E-Switch. The issue involves an error in error handling code where it...

PT-2025-18885 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue arises when tcp make synack is called from process context, potentially leading to the use of this cpu add in preemptib...

PT-2023-6894 · Veeam · Veeam One

Name of the Vulnerable Software and Affected Versions: Veeam ONE affected versions not specified Description: A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection used to access its configuration database, potentially leading to remote co...

PT-2023-24048 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed...

PT-2023-24062 · Video · Video

Name of the Vulnerable Software and Affected Versions: In video affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in video. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2023-35565 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported, involving functions such as cmsMLUsetWide, Type Text Description Read, and cmsReadTag...

PT-2023-35564 · Libecc · Libecc

Name of the Vulnerable Software and Affected Versions: libecc affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the OpECC ValidatePubkey function within the libecc module. This function is called by the...

PT-2023-32990 · Ibexa · Ibexa Solr Search Engine

Name of the Vulnerable Software and Affected Versions: Ibexa Solr search engine versions affected versions not specified Description: The issue is related to an error in Ibexa's Solr search engine, potentially exposing Solr credentials. This is a critical issue affecting all supported versions of...

PT-2023-35561 · Git +1 · Serenity

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the OpenType font processing code, specifically in the OpenType::be u32,...

PT-2023-35562 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, with a crash type of Heap-buffer-overflow READ 1. The crash state includes functions such as bit...

PT-2023-14505 · Ivanti · Automation

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication. There is no information...

PT-2023-9844 · Mediatek · Mediatek Modem

Name of the Vulnerable Software and Affected Versions: MediaTek Modem affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the Modem. This could lead to remote code execution if a UE has connected to a rogue base...

PT-2023-27924 · Zoho · Manageengine Mobile Device Manager

Name of the Vulnerable Software and Affected Versions: ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the ManageEngine Mobile Device ManagerMDM APP. This vulnerability can be...

PT-2023-27920 · Nokia · Chunghwa Telecom Nokia G-040W-Q

Name of the Vulnerable Software and Affected Versions: Chunghwa Telecom NOKIA G-040W-Q affected versions not specified Description: The issue is related to insufficient filtering for user input, allowing a remote attacker with administrator privilege to perform a Command Injection attack. This ca...

PT-2023-32419 · Mattermost · Mattermost Desktop App

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop for MacOS affected versions not specified Description: The issue is related to Mattermost Desktop for MacOS failing to utilize the secure keyboard input functionality provided by macOS. This failure allows other processes t...

PT-2023-26755 · Unknown · Shouzu Sweets Oz

Name of the Vulnerable Software and Affected Versions: shouzu sweets oz version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For shouzu sweets oz version 13.6.1, at the moment, there is no...

Security Bulletin: IBM Storage Ceph is vulnerable to a panic in Golang (CVE-2022-28327)

Summary Golang is used by IBM Storage Ceph as part of RGW and in assorted other locations. CVE-2022-28327 Vulnerability Details CVEID: CVE-2022-28327 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validaiton by the generic P-256 feature in crypto/elliptic. B...

PT-2023-35557 · Git +1 · Php

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Segv on an unknown address. The crash state includes ZEND HANDLE EXCEPTION SPEC HANDLER, zero, and zend execute. ...