PT-2023-26561 · Microsoft · Contosoair

Name of the Vulnerable Software and Affected Versions: ContosoAir affected versions not specified Description: The issue is unclear whether it rests in the original repository microsoft/ContosoAir, the forked repository Apetree100122/ContosoAir, or both. Recommendations: At the moment, there is n...

PT-2023-35933 · Git +1 · Jq

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves several functions: decUnitCompare, decCompare, and...

PT-2023-4408 · Triangle Microworks · Scada Data Gateway

Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks SCADA Data Gateway affected versions not specified Description: This issue allows remote attackers to create arbitrary files on affected installations. User interaction is required, where the target must visit a malicious...

PT-2023-4288 · Vmware · Vmware Horizon Server

Name of the Vulnerable Software and Affected Versions: VMware Horizon Server affected versions not specified Description: The issue is related to a HTTP request smuggling vulnerability in VMware Horizon Server. A malicious actor with network access may be able to perform HTTP smuggle requests,...

PT-2023-36241 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

PT-2023-35931 · Jflex · Jflex

Name of the Vulnerable Software and Affected Versions: jflex affected versions not specified Description: The issue is related to a security exception in the jflex core, specifically in the insertNFA function of the jflex.core.NFA class. This function appears to be involved in a crash, as indicat...

PT-2023-20640 · Ox Software Gmbh +1 · Ox App Suite +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from custom log-in and log-out locations defined as jslob, which were not checked for malicious protocol handlers. This oversight allow...

PT-2023-26805 · Uvdesk · Uvdesk

Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.3 Description: An arbitrary file upload issue allows attackers to execute arbitrary code by uploading a crafted image file. Recommendations: For Uvdesk version 1.1.3, at the moment, there is no information about a newer...

PT-2023-35929 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash occurs in the test verify function within the fuzz pkcs11.c file. No information is...

PT-2023-35928 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The issue is related to a security exception in the org.apache.lucene.util.automaton.RegExp.toAutomaton function. It involves the java.base/java.util.BitSet.ensureCapacity and...

PT-2023-26348 · Linux Mint +2 · Linuxmint +2

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue is not considered a security issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2023-25317 · Vound · Intella Connect

Name of the Vulnerable Software and Affected Versions: Vound Intella Connect version 2.6.0.3 Description: The issue is related to stored Cross-site Scripting XSS, which allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For version 2.6.0.3,...

PT-2023-4086 · D Link · D-Link Dir-885L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-885L version FW102b01 Description: The issue is related to an Authentication Bypass vulnerability that allows remote attackers to gain escalated privileges via phpcgi. This vulnerability only affects products that are no longer...

PT-2023-9277 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to disclose protected information or cause a denial of service...

PT-2023-36095 · Quote +3 · Quote +3

Name of the Vulnerable Software and Affected Versions: dlopen derive affected versions not specified Description: The issue concerns the dlopen derive crate, which has not been updated since June 9, 2019. It depends on outdated versions of quote and syn, specifically quote = "0.6.12" and syn =...

PT-2023-25835 · Tadiran Telecom · Tadiran Telecom Aeonix

Name of the Vulnerable Software and Affected Versions: Tadiran Telecom Aeonix affected versions not specified Description: The issue is related to an observable response discrepancy, which is a type of security flaw. This discrepancy can potentially be exploited. Recommendations: At the moment,...

PT-2023-25833 · Jbl · Jbl Soundbar Multibeam 5.1

Name of the Vulnerable Software and Affected Versions: JBL soundbar multibeam 5.1 affected versions not specified Description: The issue concerns the use of hard-coded credentials, which is a security risk. There is no information provided about the estimated number of potentially affected device...

PT-2023-35927 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2023-2452)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via...

PT-2023-35924 · Unknown · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: A security exception occurs in the JavaLanguageParser.expr function, leading to a crash. The issue is related to the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr...