CVE-2023-23549 DoS via long hostnames

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

CVE-2023-32641

Improper input validation in firmware for IntelR QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access...

CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution...

CVE-2023-31203

Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-27519

Improper input validation in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32701 Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)

Improper Input Validation in the Networking Stack of QNX SDP versions 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition...

CVE-2023-32701

CVE-2023-32701 affects BlackBerry QNX SDP Networking Stack in SDP versions 6.6, 7.0, and 7.1. Root cause: improper input validation in the networking stack. Impact includes information disclosure and Denial-of-Service. Exploitation details are not provided in the documents; local access with low ...

Rockwell Automation SIS Workstation and ISaGRAF Workbench

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : SIS Workstation and ISaGRAF Workbench Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unprivileged local...

PT-2023-26316 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: Intel Unison software affected versions not specified Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via network access. Recommendations: At the...

PT-2023-18440 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via network access. Recommendations: At the moment,...

Adobe InDesign < 18.5.1 / 18.0 < 19.0.0 Multiple Vulnerabilities (APSB23-55) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 18.5.1, 19.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-55 advisory. - Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by an out-of-bounds read...

Siemens RUGGEDCOM APE1808 Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE W700

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

SUSE SLES15 Security Update : tomcat (SUSE-SU-2023:4423-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4423-1 advisory. - URL Redirection to Untrusted Site 'Open Redirect' vulnerability in FORM authentication feature Apache Tomcat.This issue affects...

PT-2023-27007 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...

SuiteCRM 安全漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM suffers from a server-side request forgery vulnerability that stems from the product's failure to properly validate user input, which can be exploited by an attacker to probe server intranet resources...

PT-2023-14677 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: At the moment,...

PT-2023-23228 · Intel · Openvino Model Server

Name of the Vulnerable Software and Affected Versions: OpenVINO Model Server versions prior to 2022.3 Description: The issue is related to improper input validation in the OpenVINO Model Server software, which may allow an unauthenticated user to potentially enable denial of service via network...

Siemens PNI

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Adobe InDesign < 18.5.1 / 18.0 < 19.0.0 Multiple Vulnerabilities (APSB23-55)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.1, 19.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-55 advisory. - Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by an out-of-bounds rea...