PT-2023-35839 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the function names dxf fixup string, dwg dxf DIMENSION ALIGNED private, and dwg dxf...

PT-2023-17176 · Unknown · Settings Module

Name of the Vulnerable Software and Affected Versions: Settings module affected versions not specified Description: The issue concerns a file privilege escalation vulnerability in the Settings module. Successful exploitation of this vulnerability may affect confidentiality. Recommendations: At th...

PT-2023-35833 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include the DwaCompressor readChannelRules and DwaCompressor uncompress...

PT-2023-35832 · Git +1 · Liblouis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions, includi...

PT-2023-35835 · Git +1 · Php

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves zval call destructor, zend hash reverse apply, and shutdown...

PT-2023-22547 · Lavalite · Lavalite

Name of the Vulnerable Software and Affected Versions: LavaLite version 9.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. Recommendations: For LavaLite version 9.0.0...

PT-2023-15886 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows discovery of network details via error messages in affected versions of the software. Recommendations: At the moment, there is no information about a newer version...

PT-2023-23507 · Pax Technology · Rpa Technology Mobile Mouse

Name of the Vulnerable Software and Affected Versions: RPA Technology Mobile Mouse version 3.6.0.4 Description: The issue concerns Remote Code Execution RCE, allowing for potential code execution on affected devices. Recommendations: For RPA Technology Mobile Mouse version 3.6.0.4, at the moment,...

PT-2023-36172 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon affected versions not specified Description: The issue is related to the conmon package, which has been rebuilt with the go 19.9 secure release. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-36171 · Unknown +1 · Prometheus-Sap Host Exporter +1

Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue is related to a security concern in the go 1.19 release, which is used to rebuild the prometheus-sap host exporter package. Recommendations: At the moment,...

PT-2023-12001 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

PT-2023-3785 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: The issue exists in the command line interface of Aruba EdgeConnect Enterprise, allowing remote authenticated users to run arbitrary commands on the underlying host...

PT-2025-26111 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential buffer overflow issue has been identified in the Linux kernel, specifically in the ni set mc special registers function. The issue arises from the lack of bounds checking f...

PT-2023-4829 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to a possible out of bounds read in the Bluetooth driver due to improper input validation. This could lead to a local information leak, with System execution...

PT-2023-2910 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: Vulnerabilities exist in the command line interface of Aruba EdgeConnect Enterprise that allow remote authenticated users to run arbitrary commands on the underlying...

PT-2023-7402 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central on-premise affected versions not specified Description: The issue is related to potential authenticated reflected cross-site scripting XSS attacks due to user input validation and sanitization issues. An attacker must...

PT-2023-36090 · Unknown · Crypto Secretbox

Name of the Vulnerable Software and Affected Versions: crypto secretbox affected versions not specified Description: The crypto secretbox crate has been forked and renamed from xsalsa20poly1305. The new repository location is available. Recommendations: At the moment, there is no information abou...

PT-2023-21092 · Gira · Gira Homeserver

Name of the Vulnerable Software and Affected Versions: Gira HomeServer versions up to 4.12.0.220829 beta Description: A problematic issue was found, affecting unknown code of the file /hslist. The manipulation of the argument lst with the input debug%27" leads to cross-site scripting. The attack...

PT-2025-26056 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the fbtft core, where the smem len is not set before the fb deferred io init call. This issue arises because...

PT-2023-12023 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue affects Android SoC. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. ...