PT-2023-18294 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a weak configuration in the Modem due to improper input validation when processing LTE security mode command messages received from the network. This can lead to...

PT-2023-17635 · Mediatek +2 · Mt6739 +2

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with...

PT-2023-18478 · Qualcomm · Qm215 Firmware +220

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HOST when processing a WLAN FW request to allocate memory. Recommendations: At the moment, there is no...

PT-2023-17557 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: Wlan firmware affected versions not specified Description: The issue is related to an integer overflow in the wlan firmware, which could lead to a system crash and result in a remote denial of service. No additional execution privileges are...

PT-2023-25101 · Sourcecodester · Sourcecodester Shopping Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Shopping Website version 1.0 Description: A critical issue has been found in the file insert-product.php, allowing for unrestricted upload. This can be exploited remotely. The issue has been publicly disclosed and may be used f...

PT-2023-17554 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: Wlan firmware affected versions not specified Description: The issue is related to an integer overflow in the wlan firmware, which could lead to a system crash and result in a remote denial of service. No additional execution privileges are...

PT-2023-18296 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is related to memory corruption in Linux when processing a specific request, QcRilRequestImsRegisterMultiIdentityMessage. Recommendations: At the moment, there is no information abo...

PT-2023-17633 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a missing permission check, which could lead to a local escalation of privilege without needing additional execution privileges. User interaction is not required for...

PT-2023-17634 · Mediatek +1 · Mt6789 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with...

PT-2023-17556 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: wlan firmware affected versions not specified Description: The issue is related to an integer overflow in the wlan firmware, which could lead to a system crash. This can result in a remote denial of service, and no additional execution...

PT-2023-17611 · Mediatek +1 · Mt6879 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read due to a missing bounds check in display. This could lead to local information disclosure, requiri...

PT-2023-35894 · Git +1 · Serenity

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, associated with a crash type. The crash state involves functions such as Gfx::BooleanDecoder::initialize...

PT-2023-35892 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...

PT-2023-36207 · Rekor · Rekor

Name of the Vulnerable Software and Affected Versions: rekor affected versions not specified Description: The issue is related to a security release in the Go programming language, specifically version 1.20. The problem is addressed by rebuilding the rekor package with this security release...

PT-2023-36209 · Go +1 · Go +1

Name of the Vulnerable Software and Affected Versions: prometheus-ha cluster exporter affected versions not specified Description: The issue is related to a security concern in the go 1.20 release, which is addressed by rebuilding the prometheus-ha cluster exporter package with this security...

PT-2023-35891 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Memcpy-param-overlap. The crash occurs in the following functions: pdfi copy truetype font, pdfi load font,...

PT-2023-35887 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception occurs due to a crash in the checkSsrf and checkSsrfSocket functions within the ServerSideRequestForgery class. This issue is related to the java.net.Socket.connect...

PT-2023-24989 · Unknown · Ac Centralized Management Platform

Name of the Vulnerable Software and Affected Versions: Annet AC Centralized Management Platform version 1.02.040 Description: The issue is related to Stored Cross-Site Scripting XSS. Recommendations: For Annet AC Centralized Management Platform version 1.02.040, at the moment, there is no...

PT-2023-35888 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception occurs due to a crash in the checkSsrf and checkSsrfSocket functions within the ServerSideRequestForgery class. This issue is related to the java.net.Socket.connect...

PT-2023-35886 · Unknown · Com.Code Intelligence.Jazzer.Sanitizers.Xpathinjection +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the checkXpathExecute function from com.code intelligence.jazzer.sanitizers.XPathInjection, and the...