PT-2023-36205 · Buildah +1 · Buildah +1

Name of the Vulnerable Software and Affected Versions: buildah affected versions not specified Description: The issue is related to a security release in the go 1.20 package. The buildah package has been rebuilt with this security release to address the issue. There is no information provided abo...

CVE-2023-36467 AWS data.all vulnerable to RCE through user injection of Python Commands

AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data.all versions 1.2.0 through 1.5.1 do not prevent remote code execution when a user injects Python commands into the ‘Template’ field when configuring a data pipeline. The issue...

PT-2023-17957 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the inviteInternal function of p2p iface.cpp due to a missing bounds check. This could lead to local information disclosure, requiring System...

PT-2023-17972 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a logic error in the code of CarrierPrivilegesTracker.java, specifically in the getCurrentPrivilegedPackagesForAllUsers function. This error can lead to a permission bypass,...

PT-2023-24908 · Ruijie · Ruijie Rg-Bcr860

Name of the Vulnerable Software and Affected Versions: Ruijie RG-BCR860 version 2.5.13 Description: A critical issue affects the Network Diagnostic Page component, leading to os command injection through unknown processing. This can be exploited remotely. Recommendations: For Ruijie RG-BCR860...

PT-2023-25056 · H3C · H3C Magic

Name of the Vulnerable Software and Affected Versions: H3C Magic B1STV100R012 affected versions not specified Description: A stack overflow in the Edit BasicSSID function allows attackers to cause a Denial of Service DoS via a crafted POST request to the API endpoint. The issue is related to the...

Security Bulletin: A vulnerability has been identified in IBM Storage Scale System which could allow unauthorized access to user data or injection of arbitrary data in the communication protocol (CVE-2020-4927)

Summary A security vulnerability has been identified in all levels of IBM Storage Scale System which could allow unauthorized access to user data or injection of arbitrary data in the communication protocol . This vulnerability only affects Storage Scale clusters that host file systems. Clusters...

PT-2023-36200 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the go 1.20 package, which is used by the amazon-ssm-agent. The package has been rebuilt with the go 1.20 security release to address...

PT-2023-36202 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.20 security release. Recommendations: At the moment, there is no information about a...

PT-2023-35520 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free WRITE 8 crash has been reported. The crash state includes function calls such as mk event timeout destroy, flb sched destroy, and f...

PT-2023-18716 · Unknown · Contour Service

Name of the Vulnerable Software and Affected Versions: Contour Service affected versions not specified Description: The issue concerns a lack of permission checking in the Contour Service, allowing an attacker to create analyses for datasets they do not have permission for. This could lead to...

PT-2023-35882 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. The crash involves functions such as ndpi search thrift tcp udp, check ndpi detection func, a...

PT-2023-35884 · Uofs · Uofs

Name of the Vulnerable Software and Affected Versions: uofs affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs in the uofs component. Specifically, the crash happens in the pdfi find cff index and pdfi read cff font functions...

PT-2023-35881 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves repeated calls to the AffixMgr::compoun...

PT-2023-4952 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: The issue is related to a buffer overflow in the stack of the DDP service in the D-Link DAP-2622 wireless access point firmware. This can be exploited by a remote attacker to execut...

PT-2023-21535 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an improper authentication mechanism. A locally authenticated malicious user may potentially exploit this by bypassing certain authentication mechanisms to elevate...

PT-2023-21474 · Unknown · Osd Bare Metal Server

Name of the Vulnerable Software and Affected Versions: OSD Bare Metal Server affected versions not specified Description: The issue concerns the use of a cryptographic algorithm in the OSD Bare Metal Server that is no longer considered sufficiently secure. Recommendations: At the moment, there is...

PT-2023-21974 · Zscaler · Client Connector

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A URL parameter during the login flow was vulnerable to injection, allowing an attacker to insert a malicious domain. This would redirect the user after authentication and send the...

PT-2023-3224 · Vmware · Vmware Vcenter Server +1

Name of the Vulnerable Software and Affected Versions: VMware vCenter Server affected versions not specified Description: The issue is related to a heap overflow vulnerability in the implementation of the DCERPC protocol in VMware vCenter Server. This vulnerability can be exploited by a malicious...

PT-2023-35877 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search line, check ndpi detection func, and ndpi check flow...