PT-2023-16104 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that has been rejected and is not i...

CVE-2023-22488 Missing authorization in Flarum

Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private content and bypass access checks that would be in place for such content. The notification-sending component does not check that the subject of the notification can be seen by the...

PT-2023-9229 · Unknown · Vipre Advanced Security

Name of the Vulnerable Software and Affected Versions: VIPRE Advanced Security affected versions not specified Description: The issue is related to the Patch Management Agent component of VIPRE Advanced Security, which is affected by an uncontrolled search path element vulnerability. This...

PT-2023-13709 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO - BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns a misconfiguration in the EXFO - BV-10 Performance Endpoint Unit, specifically with the system configuration file having misconfigured...

PT-2023-16108 · Sourcecodester · Sourcecodester Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Flight Booking Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Online Flight Booking Management System, affecting the file add contestant.php. The...

PT-2023-14916 · Rumpus · Rumpus

Name of the Vulnerable Software and Affected Versions: Rumpus affected versions not specified Description: The issue is related to a Cross-site request forgery CSRF and privilege escalation vulnerability that may allow privilege escalation. Recommendations: At the moment, there is no information...

PT-2023-1071 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory when handling HTML content, which can allow a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2023-33050 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: Software affected versions not specified Description: The issue concerns a susceptibility to XSS attacks in the bundled xml-rpc debugger. This debugger is intended for developers and not for en...

PT-2023-12629 · Zephyrproject +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the lack of a check to see if slot 0 is being uploaded from the device to the host. This oversight allows for the easy retrieval o...

PT-2023-14041 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification from the National Vulnerabilit...

PT-2023-14043 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number,...

PT-2023-1370 · Cisco · Cisco Industrial Network Director

Name of the Vulnerable Software and Affected Versions: Cisco Industrial Network Director affected versions not specified Description: The issue is due to improper validation of content submitted to the affected application, allowing an authenticated, remote attacker to conduct stored cross-site...

PT-2023-1124 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2023-1089 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Message Queuing MSMQ in Microsoft Windows operating systems. Exploitation of this issue may allo...

PT-2023-1403 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to insufficient input validation in the ASP, which may allow an attacker with physical access to gain unauthorized write access to memory. This could...

PT-2023-1145 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for internal system data in the Windows operating system. This could allow an attacker to gain unauthorized access to a device. The vulnerabilit...

PT-2023-1259 · Microsoft · Windows Error Reporting Service +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Service, which can be exploited to elevate privileges. This allows an attacke...

PT-2023-1372 · Unknown · Asp Bootloader

Name of the Vulnerable Software and Affected Versions: ASP Bootloader affected versions not specified Description: The issue is related to insufficient syscall input validation in the ASP Bootloader, which may allow a privileged attacker to read memory outside the bounds of a mapped register,...

PT-2023-1024 · Microsoft · Windows Secure Socket Tunneling Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2023-1132 · Microsoft · Windows Netlogon +1

Name of the Vulnerable Software and Affected Versions: Windows Netlogon affected versions not specified Description: The issue is related to insufficient input validation in the Windows Netlogon service, which can be exploited by a remote attacker to cause a denial of service. This allows attacke...