PT-2023-20038 · Siglent · Siglent Sds 1104X-E

Name of the Vulnerable Software and Affected Versions: Siglent SDS 1104X-E SDS1xx4X-E version V6.1.37R9.ADS Description: The issue concerns Incorrect Access Control, allowing an unauthenticated attacker to overwrite firmware. Recommendations: For Siglent SDS 1104X-E SDS1xx4X-E version...

PT-2023-3170 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It...

PT-2023-3134 · Microsoft · Dynamics 365 Finance

Name of the Vulnerable Software and Affected Versions: Dynamics 365 Finance affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Dynamics 365 for Finance and Operations. This can allow a remote attacker...

PT-2023-3133 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NTFS file system, which is caused by insecure privilege management. This vulnerability can be exploited b...

PT-2023-5140 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information and elevate their...

PT-2023-3219 · Microsoft +1 · .Net Framework +2

Name of the Vulnerable Software and Affected Versions: Microsoft .NET and Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio and the Microsoft .NET platform. Exploitation of this issue may allow an attacke...

PT-2023-3217 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to gain unauthorized access to protected information. Recommendations: At the moment, there is no...

PT-2023-3139 · Schneider Electric · Igss

Name of the Vulnerable Software and Affected Versions: Schneider Electric IGSS affected versions not specified Description: A Deserialization of Untrusted Data issue exists in the Dashboard module, potentially leading to remote code execution when an attacker gets the user to open a malicious fil...

PT-2023-3131 · Microsoft · Power Apps

Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Microsoft Power Apps development environment. Exploitation of this issue may...

PT-2023-3190 · Microsoft · Windows Geolocation Service +1

Name of the Vulnerable Software and Affected Versions: Windows Geolocation Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows Geolocation Service, which can be exploited by an attacker to execute arbitrary code using a special...

PT-2023-23869 · Kingsoft · Wps Office

Name of the Vulnerable Software and Affected Versions: WPS Office version 10.8.0.6186 Description: A remote attacker who can conduct a man-in-the-middle attack may execute an arbitrary OS command on the system where the product is installed by connecting the product to a malicious server and...

PT-2023-3215 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The issue is related to an information disclosure vulnerability in the DHCP Server Service of Windows operating systems. This vulnerability can be exploited by a remote...

PT-2023-3297 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Edge, which could allow a remote attacker to gain unauthorized access to protected...

PT-2023-3399 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel. It allows remote attackers to execute arbitrary code, potentially affecting the system. Recommendations: At...

PT-2023-3078 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling input data in the implementation of the Pragmatic General Multicast PGM protocol in Windows. This can allow a remote attacker to execute arbitrary...

PT-2023-17325 · Atlas Copco · Atlas Copco Power Focus 6000

Name of the Vulnerable Software and Affected Versions: Atlas Copco Power Focus 6000 affected versions not specified Description: The issue concerns the Atlas Copco Power Focus 6000 web server, which does not use a secure connection by default. This could allow an attacker to gain sensitive...

PT-2023-24821 · American Megatrends · Ami Bmc

Name of the Vulnerable Software and Affected Versions: AMI BMC affected versions not specified Description: The issue is related to a buffer overflow in the IPMI handler of the AMI BMC. An attacker with the required privileges can exploit this to potentially achieve code execution, denial of...

PT-2023-18567 · Danfoss · Danfoss Ak-Em100

Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns Reflected Cross-Site Scripting in the web applications of Danfoss AK-EM100. This allows for malicious scripts to be reflected off a vulnerable web application to...

PT-2023-22408 · Crossx · Crossx

Name of the Vulnerable Software and Affected Versions: CrossX version 1.15.3 Description: An issue in CrossX allows a local attacker to cause an escalation of privileges via the database files. Recommendations: For version 1.15.3, at the moment, there is no information about a newer version that...

PT-2023-11343 · Hewlett Packard · Hp Softpaq Installer

Name of the Vulnerable Software and Affected Versions: HP Softpaq installer affected versions not specified Description: A potential security issue has been identified that can lead to arbitrary code execution. Recommendations: At the moment, there is no information about a newer version that...