PT-2023-2112 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: The issue is related to vulnerabilities within the web-based management interface of ClearPass Policy Manager, which could allow a remote attacker to conduct a reflected...

PT-2023-35697 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several function calls, including mrb gc mark, mrb gc mark iv,...

PT-2023-1793 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Microsoft Dynamics 365, which can allow a remote attacker to gain unauthorized access to...

PT-2023-1730 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Secure Channel Schannel component of Windows operating systems. This can be exploited to cause a denial of service...

PT-2023-1734 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with insufficient access control. This vulnerability can be exploited by an...

PT-2023-1755 · Microsoft · Windows Partition Management Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Partition Management Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Partition Management Driver, which can be exploited to elevate privileges. This allows an...

PT-2023-1790 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, which can lead to cross-site scripting attacks. An attacker,...

PT-2023-19680 · Canonical +9 · Golang-Github-Golang-Protobuf-1-3 +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when parsing invalid messages, which can cause a panic. Specifically, parsing a text-format message that contains a potential number...

PT-2023-35695 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as htmlCurrentChar,...

PT-2023-15004 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2023-2193 · Lenovo · Thinkpad X1 Fold Gen 1

Name of the Vulnerable Software and Affected Versions: ThinkPad X1 Fold Gen 1 affected versions not specified Description: A vulnerability exists due to insufficient input validation in the SMI handler of the ThinkPad X1 Fold Gen 1's BIOS firmware. This could allow an attacker with local access a...

PT-2023-20186 · Aruba · Clearpass Onguard

Name of the Vulnerable Software and Affected Versions: ClearPass OnGuard Ubuntu agent affected versions not specified Description: A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows an attacker with local Ubuntu instance access to potentially obtain sensitive information...

PT-2023-1769 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to incorrect clearing or release of resources in Microsoft Office packages. Exploitation of this issue may allow a remote attacker to cause a denial of service...

PT-2023-1754 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Resilient File System ReFS, which can be exploited to elevate privileges in the system. Th...

PT-2023-16207 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns the use of a hard-coded cryptographic key, which could potentially allow an attacker to decrypt sensitive information. Recommendations: At the moment, there is no...

PT-2023-16197 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns a custom version of the dropbear SSH server used by Akuvox E11, which allows an insecure option not present in the official dropbear SSH server by default...

PT-2023-35692 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including fp cmp mag, crtmgr trust list lookup, an...

PT-2023-35693 · Git +1 · Croaring

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves several functions: array container to uint32 array, ra to...

PT-2023-15998 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.5 OpenHarmony versions prior to 3.0.7 Description: The ArKUI framework subsystem has an Improper Input Validation issue that can be exploited by local attackers to send malicious data, causing the current...

PT-2023-16746 · Alpata · Alpata Licensed Warehousing Automation System

Name of the Vulnerable Software and Affected Versions: Alpata Licensed Warehousing Automation System versions through 2023.1.01 Description: The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection due to improper neutralization of...