PT-2023-5058 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Office. It allows a remote attacker to conduct spoofing attacks...

PT-2023-5030 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows Kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no...

PT-2023-5063 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system. It allows an attacker to potentially elevate their privileges. Recommendations: At the...

PT-2023-25263 · Unknown · Mtpproperty

Name of the Vulnerable Software and Affected Versions: MtpProperty affected versions not specified Description: The issue is related to an out of bounds read in MtpPropertyValue of MtpProperty.h due to uninitialized data. This could lead to local information disclosure with no additional executio...

PT-2023-22522 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...

PT-2023-27380 · Canonical +2 · Moodle

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No details are provided about the issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-25268 · Google +6 · Android +1

Name of the Vulnerable Software and Affected Versions: DatabaseUtils.java affected versions not specified Description: The issue is related to SQL injection in the bindSelection method of DatabaseUtils.java. This could lead to local information disclosure with no additional execution privileges...

PT-2023-36003 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-19845 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 5.0.5 Description: The issue is related to incorrect access restriction to a resource from an unauthorized actor. There is no information provided about the estimated number of potentially affected devices worldwide ...

PT-2023-36001 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves several functions: bit chain alloc size, bit write RC, and bit ...

PT-2023-28238 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious fil...

PT-2023-28230 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

PT-2023-28231 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-36000 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state includes functions such as H5F accum free, H5MF xfree, and H5MF free aggrs. Recommendations: At the moment, there is no...

PT-2023-28251 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-21477 · Ibm · Domino Server

Name of the Vulnerable Software and Affected Versions: Domino server affected versions not specified Description: In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks. Recommendations: At the moment, there is no...

PT-2023-20137 · Nvidia · Nvidia Cumulus Linux

Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux affected versions not specified Description: The issue concerns the forwarding of VxLAN-encapsulated IPv6 packets in NVIDIA Cumulus Linux. When such a packet is received on an SVI interface with its DMAC/DIPv6 set to the...

PT-2023-35997 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash was reported due to a Memcpy-param-overlap issue. The crash state includes repeat, repeat, and p ere. No information is available about the estimated number of potentially...

PT-2023-23112 · Nvidia · Nvidia Geforce Now

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce Now for Android affected versions not specified Description: The issue is related to a vulnerability in the game launcher component of NVIDIA GeForce Now for Android. A malicious application on the same device can process the...

PT-2023-26465 · Aruba · Aruba 9000 Series Gateways +3

Name of the Vulnerable Software and Affected Versions: Aruba 9200 and 9000 Series Controllers and Gateways affected versions not specified Description: Vulnerabilities exist in the BIOS implementation that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker...