PT-2023-35801 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the crash type being a Stack-buffer-overflow WRITE 1. Th...

PT-2023-35800 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: cli html normalise, html normalise map, and cli scanhtm...

PT-2023-17054 · Hewlett Packard · Pagewide Xl +1

Name of the Vulnerable Software and Affected Versions: HP DesignJet and PageWide XL TAA compliant models affected versions not specified Description: The issue concerns the potential disclosure of information if the hard disk drive is physically removed from certain printer models. There is no...

PT-2023-7943 · Unified Automation · Uagateway

Name of the Vulnerable Software and Affected Versions: Unified Automation UaGateway affected versions not specified Description: This issue is a use-after-free vulnerability within the handling of NodeManagerOpcUa objects. The vulnerability allows remote attackers to execute arbitrary code on...

PT-2023-36307 · Unknown · Openssl-Ibmca

Name of the Vulnerable Software and Affected Versions: OpenSSL-ibmca affected versions not specified Description: It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption, which could allow an attacker to expose sensitive information. Recommendations: At the moment, there i...

PT-2023-2816 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The issue results from the lack of proper locking when performing operations on an object,...

PT-2023-21379 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management versions 7.6.1.2 through 7.6.1.3 Description: The issue could disclose sensitive information in an error message, which could be used in further attacks against the system. Recommendations: For versions 7.6.1.2 and...

PT-2023-2819

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a flaw in the authentication procedure of the ksmbd module in Linux operating systems. This flaw can be exploited by a remote attacker to perform a brute force...

PT-2023-2821 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2 LOGOFF and SMB2 CLOSE commands. The issue...

PT-2023-26458 · Avahi +8 · Avahi +8

Name of the Vulnerable Software and Affected Versions: Avahi affected versions not specified Description: A vulnerability was found in Avahi, where a reachable assertion exists in the avahi alternative host name function. Recommendations: At the moment, there is no information about a newer versi...

PT-2023-36152 · Ibm · Openssl-Ibmca

Name of the Vulnerable Software and Affected Versions: openssl-ibmca affected versions not specified Description: The issue is related to a timing-based side channel attack in RSA within the IBMCA engine of openssl-ibmca. Recommendations: At the moment, there is no information about a newer versi...

PT-2023-35796 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include the crash type being a Heap-buffer-overflow WRITE 1. The crash state involves several function...

PT-2023-36149 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue is related to the secure boot key. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2023-21546 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the potential exposure of OneView user accounts through an HPE OneView appliance dump. Recommendations: At the moment, there is no information about a newer version...

PT-2023-20816 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.3 Description: A cross-site request forgery CSRF issue allows attackers to set a person to a user and then set that user to be an Administrator. Recommendations: For ChurchCRM version 4.5.3, at the moment, there is no...

PT-2023-21545 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the exposure of proxy credential settings through an HPE OneView appliance dump. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-22673 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0 Description: A heap overflow issue was discovered in YASM via the handle dot label function at /nasm/nasm-token.re. This issue has been disputed by third parties, arguing it is a bug rather than a security issue because YAS...

PT-2023-36150 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that is fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2023-35793 · Git +1 · Grok

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details about the crash include the involvement of grk::DecompressCodeblock::release, grk::t1...

PT-2023-20484 · Telindus · Telindus Apsal

Name of the Vulnerable Software and Affected Versions: Telindus Apsal version 3.14.2022.235 b Description: An issue was discovered that allows unauthorized actions, which could modify the application's behavior, and these actions may not be blocked. Recommendations: For Telindus Apsal version...