PT-2023-35900 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include the crash type being a Heap-buffer-overflow READ 2, and the crash...

PT-2023-12395 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an attacker to launch a Reflected XSS attack using a crafted URL. This type of attack occurs when an application takes user input and reflects it back to the user...

PT-2023-5029 · Asus · Asus Rt-Ac86U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC86U affected versions not specified Description: The issue is related to insufficient filtering of special characters in the Adaptive QoS - Web History function, allowing a remote attacker with regular user privilege to perform a...

PT-2023-4553 · Openssl +7 · Openssl +7

Name of the Vulnerable Software and Affected Versions: OpenSSL affected versions not specified Description: The AES-SIV cipher implementation in OpenSSL contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. This issue can mislead...

PT-2023-18036 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible out of bounds write in the gatt end operation function of gatt utils.cc due to a missing bounds check. This could lead to remote code execution with no...

PT-2023-8217 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listening on TC...

PT-2023-15843 · Dsoftbus · Dsoftbus

Name of the Vulnerable Software and Affected Versions: DSoftBus affected versions not specified Description: The issue is related to an unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the...

PT-2023-22631 · Unknown · Wliang6 Chatengine

Name of the Vulnerable Software and Affected Versions: wliang6 ChatEngine affected versions not specified Description: A Cross Site Scripting XSS issue exists in the textMessage field in /src/chatbotapp/LoginServlet.java of wliang6 ChatEngine, allowing attackers to execute arbitrary code. This...

PT-2023-25851 · Unknown · Atcmdserver

Name of the Vulnerable Software and Affected Versions: atcmdserver module affected versions not specified Description: The issue concerns the interception of commands from the modem in the atcmdserver module. This could allow attackers to rewrite the non-volatile random-access memory NVRAM or...

PT-2023-15839 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: The issue concerns a vulnerability in the identity verification process of the Gallery module, which can be bypassed. This could potentially lead to out-of-bounds access if...

PT-2023-23932 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue is related to the lack of validation of identification strings before processing, which could make PiiGAB M-Bus vulnerable to cross-site scripting attacks. Recommendations: A...

PT-2023-24875 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the use of a weak hash algorithm for storing passwords. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2023-25405 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns hard-coded credentials used for authentication in PiiGAB M-Bus. No information is provided about the estimated number of potentially affected devices or real-world...

PT-2023-25152 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker could send a phishing email to the device owner with a link that, when clicked, executes a certain command if the...

PT-2023-25850 · Wms Api · Wms Api

Name of the Vulnerable Software and Affected Versions: WMS API affected versions not specified Description: The issue is related to an input verification vulnerability in the WMS API. Successful exploitation of this issue may cause the device to restart. Recommendations: At the moment, there is n...

PT-2023-15833 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns a vulnerability where identity verification can be bypassed in the storage module. This could potentially affect service confidentiality. There is no information...

PT-2023-8302 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the prog.cgi component of D-Link DIR-X3260 Wi-Fi routers, allowing remote attackers to execute arbitrary code. The flaw...

PT-2023-5717 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to the ArubaOS command line interface, where vulnerabilities exist that allow an authenticated attacker to access sensitive information. Successful exploitation could...

PT-2023-35896 · Unknown · Javaparser

Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: The issue is related to a security exception in the JavaParser library. A crash occurs due to a security exception, with the crash state involving the TreeVisitorValidator.accept and...

PT-2023-12611 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns incomplete read and write permission verification in the GPU module. Successful exploitation may affect service confidentiality,...