PT-2023-18147 · Unknown · Libdexfile

Name of the Vulnerable Software and Affected Versions: libdexfile affected versions not specified Description: The issue is related to a possible out of bounds read in libdexfile due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privilege...

PT-2023-18124 · Unknown · Window Manager

Name of the Vulnerable Software and Affected Versions: Window Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

PT-2023-8975 · Node.Js +8 · Node.Js +8

Name of the Vulnerable Software and Affected Versions: Node.js affected versions not specified Description: A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service DoS. The serv...

PT-2023-12214 · Isulad · Isulad

Name of the Vulnerable Software and Affected Versions: iSulad affected versions not specified Description: The issue is related to iSulad using the lcr+lxc runtime by default to run malicious images, which can cause a Denial of Service DOS. Recommendations: At the moment, there is no information...

PT-2023-35551 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash state includes functions such as Calc Length, RunIns, and Instance Reset. Recommendation...

PT-2023-35550 · Git +1 · Php

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address, which occurs during the execution of certain functions, including cleanup liv...

PT-2023-27284 · Unknown · Gpuservice

Name of the Vulnerable Software and Affected Versions: GpuService affected versions not specified Description: The issue is related to a possible use after free due to a race condition in the GpuService of GpuService.cpp. This could lead to local escalation of privilege with no additional executi...

PT-2023-35515 · Unknown · Python-Bugzilla

Name of the Vulnerable Software and Affected Versions: python-bugzilla affected versions not specified Description: The issue concerns a potential API Key leak. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2023-35547 · Git +1 · Igraph

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 11 crash has been reported. The crash involves the igraph pajek yyparse and igraph read graph pajek functions, and it occurs i...

PT-2023-29985 · Unknown · Zentao Biz

Name of the Vulnerable Software and Affected Versions: Zentao Biz versions 8.7 and earlier Description: The issue concerns an Information Disclosure problem. Recommendations: For Zentao Biz versions 8.7 and earlier, at the moment, there is no information about a newer version that contains a fix...

PT-2023-27274 · Google · Android

Name of the Vulnerable Software and Affected Versions: PipTaskOrganizer.java affected versions not specified Description: The issue is related to a logic error in the code of PipTaskOrganizer.java, specifically in the onTaskAppeared method. This error can be exploited to bypass background activit...

PT-2023-6581 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: The issue is related to a memory buffer overflow, allowing an attacker to execute arbitrary code in the context of the current user. This could affect the confidentiality,...

PT-2023-35549 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. Technical details about the crash include the involveme...

PT-2023-35546 · Git +1 · Igraph

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash involves several functions, including igraph strvector set len,...

PT-2023-10707 · Abus · Abus Tvip Cameras

Name of the Vulnerable Software and Affected Versions: ABUS TVIP cameras affected versions not specified Description: The issue allows attackers to gain control of the program via a crafted string sent to the sprintf function. This is a Buffer Overflow vulnerability in certain ABUS TVIP cameras...

PT-2023-28196 · Sielco · Analog Fm Transmitter +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The application suffers from a privilege escalation issue. A user with read permissions can elevate privileges by sending a HTTP POST to set a parameter...

PT-2023-35543 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the iasecc parse size, iasecc parse get tlv, and iasecc parse docp functions. No...

PT-2023-30150 · Elastic · Sharepoint Online Python Connector

Name of the Vulnerable Software and Affected Versions: Elastic Sharepoint Online Python Connector affected versions not specified Description: An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a...

PT-2023-30051 · Unknown · Zentao Biz

Name of the Vulnerable Software and Affected Versions: ZenTao Biz versions 4.1.3 and earlier Description: The issue is related to a Cross Site Scripting XSS vulnerability in the Version Library. Recommendations: For ZenTao Biz versions 4.1.3 and earlier, at the moment, there is no information abo...

PT-2023-8164 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the target must...