PT-2023-26903 · Forescout · Forescout Secureconnector

Name of the Vulnerable Software and Affected Versions: ForeScout NAC SecureConnector version 11.2 Description: The issue is related to an uncontrolled search path element, which is a type of security weakness. This weakness can potentially be exploited, although specific details about real-world...

PT-2023-26901 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to multiple CSRF CWE-352 problems. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2023-24047 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure, requiring System execution...

PT-2023-17670 · Mediatek +3 · Mt6895 +4

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read in imgsys cmdq due to missing valid range checking. This could lead to local...

PT-2023-36253 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: Terraform affected versions not specified Description: The issue is related to a security release in Go 1.21, which Terraform depends on. The estimated number of potentially affected devices worldwide is not available. There is no information...

PT-2023-27633 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase version 1.18.9 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function. Recommendations: For DataEase version 1.18.9, at the moment, there is ...

PT-2023-35988 · Unknown · Javaparser

Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: A security exception crash has been reported. The crash involves the insertComments function in com.github.javaparser.CommentsInserter, and the equals method in java.base/java.util.Objec...

PT-2023-13772 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number,...

PT-2023-35989 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions ndpi domain classify contains, ndpi ge...

PT-2023-18384 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an example implementation related to the Open Compute Project's short-form report generator for Vendor Security Reviews. The short-form report is a JSON object...

PT-2023-6976 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to the use of memory after it has been freed due to insufficient input validation when processing an ElementType element. This can allow an attacker to execute...

PT-2023-5232 · Kepware · Kepserverex

Name of the Vulnerable Software and Affected Versions: KEPServerEX affected versions not specified Description: The issue is related to insufficient protection of credentials in KEPServerEX, allowing an adversary to capture user credentials due to the web server's use of basic authentication. Thi...

PT-2023-6881 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: NagiosXI affected versions not specified Description: The issue is related to the failure to neutralize special elements in the software. This could allow a remote attacker to execute arbitrary commands. Recommendations: At the moment, there ...

PT-2023-27664 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 Description: The issue concerns a command execution vulnerability in the 'sub 3A1D0' function. Recommendations: For version 1.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2023-35986 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the functions derive spatial luma vector prediction, fill...

PT-2023-28831

Name of the Vulnerable Software and Affected Versions KNX Protocol affected versions not specified Description Devices using KNX Connection Authorization that support Option 1 are susceptible to a lockout mechanism issue. An attacker with network access or physical access to the device can utiliz...

PT-2023-5334 · Ptc · Ptc Codebeamer

Name of the Vulnerable Software and Affected Versions: PTC Codebeamer affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in PTC Codebeamer, allowing a remote attacker to execute arbitrary code. If an attacker tricks an admin user...

PT-2023-26856 · Aruba · Arubaos-Switch

Name of the Vulnerable Software and Affected Versions: ArubaOS-Switch affected versions not specified Description: A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of th...

CVE-2023-4569

A memory leak flaw was found in nftsetcatchallflush in net/netfilter/nftablesapi.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak. Mitigation Mitigation for this issue is to skip loading the affected...

PT-2023-27023 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev449-g5948e4f70-master Description: The issue is related to a heap-use-after-free vulnerability via the gf bs align function at bitstream.c. This allows attackers to cause a Denial of Service DoS by supplying a crafted...