PT-2023-26324

Name of the Vulnerable Software and Affected Versions Azure Apache Hadoop affected versions not specified Description The issue is related to a spoofing vulnerability in Azure Apache Hadoop. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2023-25730 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to a spoofing vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-wor...

PT-2023-4301 · Microsoft · Outlook +1

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Outlook, which can be exploited to execute arbitrary code. This allows remote attackers to affect the system. No...

PT-2023-21802 · Unknown · Media Codec

Name of the Vulnerable Software and Affected Versions: Media codec affected versions not specified Description: The issue is related to a transient Denial of Service DOS in audio while remapping the channel buffer in media codec decoding. No information is provided about the estimated number of...

PT-2023-4386 · Microsoft · Windows Ldap +1

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol LDAP affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Lightweight Directory Access Protocol LDAP implementatio...

PT-2023-4293

Name of the Vulnerable Software and Affected Versions ASP.NET affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in ASP.NET, which allows attackers to affect the system. This vulnerability is associated with insufficient access controls in...

PT-2023-18307 · Qualcomm · Snapdragon +19

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption due to an untrusted pointer dereference in automotive systems during a system call. This can potentially lead to...

PT-2023-4298 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ in Windows operating systems. This can allow a remote attacker to execute...

PT-2023-18313 · Unknown · Gps Hlos Driver

Name of the Vulnerable Software and Affected Versions: GPS HLOS Driver affected versions not specified Description: The issue is related to memory corruption in the GPS HLOS Driver. Specifically, when the injectFdclData function receives data with an invalid data length, it can cause memory...

PT-2023-5087 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office, which can allow an attacker to execute arbitrary code. Recommendations: At the moment, there is no...

PT-2023-4329 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can affect the system and...

PT-2023-4378 · Microsoft · Windows System Assessment Tool +1

Name of the Vulnerable Software and Affected Versions: Windows System Assessment Tool affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows System Assessment Tool, which can be exploited to elevate privileges. This allows an attacker ...

PT-2023-4369 · Microsoft · Windows Projected File System +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Projected File System component. Exploitation of this issue may allow an...

PT-2023-4295 · Microsoft +1 · Asp.Net Core Signalr +2

Name of the Vulnerable Software and Affected Versions: ASP.NET Core SignalR and Visual Studio affected versions not specified Description: The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can...

PT-2023-26265 · Joomla · Onevote

Name of the Vulnerable Software and Affected Versions: oneVote component for Joomla affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. It allows for XSS targeting non-script elements...

PT-2023-26264 · Hikashop.Com +1 · Hikashop Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL Injection, which can potentially be...

PT-2023-5548 · Power · Power

Name of the Vulnerable Software and Affected Versions: In power affected versions not specified Description: The issue is related to a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction ...

PT-2023-5708 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: WLAN driver affected versions not specified Description: The issue is related to a possible out of bounds write in the wlan driver due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-35935 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves functions such as yr parser lookup loop variable, yara yyparse,...

PT-2023-4950 · Triangle Microworks · Triangle Microworks Scada Data Gateway

Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks SCADA Data Gateway affected versions not specified Description: This issue allows remote attackers to upload arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is...