PT-2023-36045 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the following functions: isvce write coeff4x4 cavlc, isvce...

PT-2023-24153 · Qualcomm · Snapdragon +59

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while parsing the ADSP response command. No information is provided about the estimated number of...

PT-2023-26080 · Ingeteam · Ingepac Da3451 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves an incorrect validation vulnerability of the data entered. This allows an attacker with access to the network on which the affected...

PT-2023-32011 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-24049 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: There is a possible information disclosure due to a missing bounds check in the display. This could lead to local information disclosure with System execution privileges needed. User...

PT-2023-36042 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the pack unpack function, mrb pack unpack function, and mrb vm exec function...

PT-2023-36041 · Git +1 · Serenity

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the Gfx::decode bmp pixel data function, which is calle...

PT-2023-28933 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the SKIP CART PAGE TITLE1 parameter. This potentially leads to unauthorized...

PT-2023-36040 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash involves the OT::cvar::decompile tuple variations and OT::cvar::subset functions, as wel...

PT-2023-32009 · Sick · Sim1012

Name of the Vulnerable Software and Affected Versions: SICK SIM1012 affected versions not specified Description: A remote unauthorized attacker may connect to the SIM1012, interact with the device, and change configuration settings. The adversary may also reset the SIM and, in the worst case,...

PT-2023-31903 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue arises from Mattermost's failure to properly validate permissions when a team member attempts to soft delete a team, allowing them to delete teams they are not part of...

PT-2023-28750 · Deyue · Deyue Remote Vehicle Management System

Name of the Vulnerable Software and Affected Versions: Deyue Remote Vehicle Management System version 1.1 Description: A deserialization vulnerability was discovered in the system. Recommendations: For Deyue Remote Vehicle Management System version 1.1, at the moment, there is no information abou...

PT-2023-31904 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: Mattermost fails to enforce character limits in all possible notification props, allowing an attacker to send a really long value for a notification prop, resulting in the server consumi...

PT-2023-28930 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the admin firstname parameter, potentially leading to unauthorized execution of...

PT-2023-28163 · Samsung · Exynos 2200

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos 2200 affected versions not specified Description: The issue is related to a GPU Double Free in the Samsung Mobile Processor Exynos 2200. No information is provided about the estimated number of potentially...

PT-2023-5878 · Dexma · Dexgate

Name of the Vulnerable Software and Affected Versions: No specific software name and version are mentioned in the provided descriptions. Description: The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor, which may allow an attacker to create maliciou...

PT-2023-29133 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: process search.php affected versions not specified Description: The issue is related to the 'search' parameter of the process search.php resource, which does not validate the characters received. As a result, these characters are sent...

PT-2023-36039 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Java affected versions not specified Description: A security exception crash has been reported. The crash involves the com.github.javaparser.GeneratedJavaParser.Expression and specific methods within java.base/sun.nio.cs.CESU 8$Encoder,...

PT-2023-36268 · Unknown · Cni-Plugins

Name of the Vulnerable Software and Affected Versions: cni-plugins affected versions not specified Description: The issue is related to the rebuild of the cni-plugins package with the go 1.21 security release. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-29121 · Google · Com.Android.Server.Telecom

Name of the Vulnerable Software and Affected Versions: com.android.server.telecom affected versions not specified Description: The issue is related to the Call management app patched by LG, which launches implicit intents that disclose sensitive data to all third-party apps installed on the same...