PT-2023-35533 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs due to a crash in the org.apache.poi.util.IOUtils.safelyAllocate function, which is called by org.apache.poi.hssf.record.RecordInputStream.readRemainder and...

PT-2024-3053

Name of the Vulnerable Software and Affected Versions iperf affected versions not specified Description A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf...

PT-2023-8896 · Grafana +2 · Grafana +2

Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue impacts Grafana instances with multiple organizations, allowing a user with Organization Admin permissions in one organization to change permissions associated with Organization...

PT-2023-6570 · Unknown · Eisbaer Scada

Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the SCADA system. Exploitation of this issue may allow a remote attacker to execute arbitrary code. The estimated...

PT-2023-6565 · Unknown · Eisbaer Scada

Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is related to the exposure of sensitive information, allowing an unauthorized actor to gain access to protected information. This can be exploited by a remote attacker...

PT-2023-25095 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue allows a local privileged user to obtain sensitive information from source code. Recommendations: For IBM Security Verify Governance version 10.0, at the moment, there is no...

PT-2023-35527 · Unknown · Bouncy Castle

Name of the Vulnerable Software and Affected Versions: Bouncy Castle affected versions not specified Description: A security exception occurs due to a crash in the net.jsign.bouncycastle.asn1 package. The crash happens when the ASN1StreamParser attempts to read a vector, specifically in the...

PT-2023-28439 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: wifi shell.c affected versions not specified Description: The issue is related to unchecked user input length in the wifi shell.c file, which can cause buffer overflows. The specific API endpoint affected is /subsys/net/l2/wifi/wifi shell.c...

PT-2023-28718 · Spa-Cart · Spa-Cart

Name of the Vulnerable Software and Affected Versions: SPA-Cart version 1.9.0.3 Description: The issue allows a remote attacker to delete all accounts due to a Cross Site Request Forgery CSRF vulnerability. Recommendations: For SPA-Cart version 1.9.0.3, at the moment, there is no information abou...

PT-2023-29106 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an out-of-bounds access vulnerability in the audio module. Successful exploitation of this vulnerability may affect availability...

PT-2023-25250 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: There is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed...

PT-2023-29094 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a type confusion vulnerability in the distributed file module. Successful exploitation of this vulnerability may cause the devic...

PT-2023-25243 · Unknown · Stmvl53L1 Module.C

Name of the Vulnerable Software and Affected Versions: stmvl53l1 module.c affected versions not specified Description: The issue is related to an incorrect bounds check in the ctrl roi function of stmvl53l1 module.c, which could lead to a possible out of bounds read. This could result in local...

PT-2023-26013 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue concerns cross site scripting XSS, specifically reflected XSS, where an attacker must trick a victim into clicking a crafted URL sent through various means like ema...

PT-2023-35523 · Spring · Spring

Name of the Vulnerable Software and Affected Versions: Spring versions affected versions not specified Description: The issue is related to a security exception in the java.lang.String.repeat method, which is called by org.springframework.expression.spel.ast.OpMultiply.getValueInternal and...

PT-2023-20609 · Xiaomi · Xiaomi Router

Name of the Vulnerable Software and Affected Versions: Xiaomi Router affected versions not specified Description: The issue is related to a Buffer Copy without Checking Size of Input, also known as a 'Classic Buffer Overflow'. This allows for Overflow Buffers in the Xiaomi Router. Recommendations...

PT-2023-5981 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows DHCP Server Service, which can be exploited by a remote attacker to cause a denial of service...

PT-2023-5941 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the TCP/IP protocol stack in Windows operating systems, which lacks sufficient protection of service data. This can be exploited by a remote...

PT-2023-5975 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows a remote attacker to cause a...

PT-2023-5936 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to errors in processing input data in the Windows operating system's message queuing component. This can allow an attacker to execute arbitrary...