PT-2023-26915 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause...

PT-2023-26931 · Installd · Installd

Name of the Vulnerable Software and Affected Versions: installd module affected versions not specified Description: The issue is related to a parameter verification vulnerability in the installd module. This vulnerability can be exploited to read and write sandbox files without authorization...

PT-2023-35950 · Git +1 · Grok

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" with a crash state of "NULL". This suggests that the problem occurs when the softwar...

PT-2023-18434 · Intel · Intel Nuc Bios

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to the use of an uninitialized resource in some IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable information disclosur...

PT-2023-23913 · Intel · Intel Nuc Rugged Kit +2

Name of the Vulnerable Software and Affected Versions: IntelR NUC Rugged Kit, IntelR NUC Kit and IntelR Compute Element BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware of certain Intel products, which may allow a...

PT-2023-35948 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves several functions, including reset context and cmt decode...

PT-2023-35946 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception crash has been reported in Apache POI, specifically in the org.apache.poi.hdgf.streams.PointerContainingStream.findChildren function. Recommendations: At the moment,...

PT-2023-18915 · Hcl +1 · Hcl Nomad For Web +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows the validation to use cryptographic keys to be circumvented if certain local files are manipulated in a specific manner. There is no...

PT-2023-26084 · Unknown · Ez Softmagic Mp3 Audio Converter

Name of the Vulnerable Software and Affected Versions: EZ softmagic MP3 Audio Converter version 2.7.3.700 Description: A buffer overflow issue was discovered in the software. Recommendations: For EZ softmagic MP3 Audio Converter version 2.7.3.700, at the moment, there is no information about a...

PT-2023-15862 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "admin dynamic app mib errors" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of...

PT-2023-15865 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “topology data service” feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary...

PT-2023-15875 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “message viewer iframe” feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary...

PT-2023-8253 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition affected versions not specified Description: The issue is related to the deserialization mechanism in the RunQuery class of Inductive Automation Ignition, allowing remote attackers to execute arbitrary code on...

PT-2023-35944 · Git +1 · Flac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2023-15870 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “reporter events type date” feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQ...

PT-2023-4313 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visio, a part of Microsoft Office and 365 Apps for Enterprise. This can allow an attacker to execute...

PT-2023-4429 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. There is no...

PT-2023-25211

Name of the Vulnerable Software and Affected Versions Azure Apache Hive affected versions not specified Description The issue concerns a spoofing vulnerability in Azure Apache Hive. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2023-4384 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows operating system's message queuing component. Exploitation of this issue may allow an attacker...

PT-2023-4386 · Microsoft · Windows Ldap +1

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol LDAP affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Lightweight Directory Access Protocol LDAP implementatio...