PT-2023-1074 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office packages, which can be exploited to execute arbitrary code. This can allow an attacker to perform...

PT-2023-1270 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue exists due to insufficient input validation in the 3D Builder program, which can allow an attacker to execute arbitrary code on the target system by tricking a user into openin...

PT-2023-1124 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2023-9998 · Unknown · Drazraeltod Pychao

Name of the Vulnerable Software and Affected Versions: DrAzraelTod pyChao affected versions not specified Description: A critical issue was found in DrAzraelTod pyChao, affecting the function klauen/lesen of the file mod fun/ init .py. This issue leads to sql injection. Recommendations: At the...

PT-2023-12594 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a problem in the HW KEYMASTER module with releasing memory. Successful exploitation may result in out-of-bounds memory access. Recommendations: At the moment,...

PT-2023-10100 · Unknown · Taoeffect Empress

Name of the Vulnerable Software and Affected Versions: taoeffect Empress affected versions not specified Description: A critical issue has been found in taoeffect Empress, affecting some unknown functionality. The manipulation leads to the use of a hard-coded password. Recommendations: To fix thi...

PT-2023-19517

Name of the Vulnerable Software and Affected Versions Simon Tatham's Portable Puzzle Collection affected versions not specified Description A crafted save file can cause a buffer overrun in the software. This issue can potentially be exploited, but no specific details about the estimated number o...

PT-2023-14351 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is from the National...

PT-2022-11624 · Whohas +1 · Whohas +1

Name of the Vulnerable Software and Affected Versions: whohas affected versions not specified Description: A vulnerability was found in the component Package Information Handler of whohas, which leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The re...

PT-2022-36777 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. The crash state involves several functions: authentic get tagged data, authentic parse...

PT-2022-24958 · Unknown · Lanyulei Ferry

Name of the Vulnerable Software and Affected Versions: lanyulei ferry affected versions not specified Description: A problematic issue was found in lanyulei ferry, affecting an unknown part of the file apis/process/task.go. The manipulation of the file name argument leads to path traversal...

PT-2022-36761 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A null-dereference read crash was reported, indicating a potential issue where the software attempts to access a null pointer, leading to a crash. The crash type is specified as a...

PT-2022-5695 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attack...

PT-2022-27249 · Huawei · Huawei Recovery

Name of the Vulnerable Software and Affected Versions: Huawei Recovery affected versions not specified Description: The issue is related to a race condition vulnerability in SD upgrade mode, which may affect data confidentiality. There is no information provided about the estimated number of...

PT-2022-25332 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Application affected versions not specified Description: The application is susceptible to Server-Side Request Forgery attacks. This allows the backend server to interact with unexpected...

PT-2022-5343 · Cisco · Cisco Roomos +1

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco RoomOS Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, including a command-lin...

PT-2022-24752 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to a sensor driver, where a missing bounds check can cause an out of bounds write. This could potentially lead to a local denia...

PT-2022-5426 · Microsoft · Windows Local Session Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Local Session Manager affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Session Manager component of the Windows operating system. This can be exploited by a remote...

PT-2022-5642 · Microsoft · Windows Tcp/Ip Driver +1

Name of the Vulnerable Software and Affected Versions: Windows TCP/IP Driver affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the Windows TCP/IP Driver, which can be exploited by a remote attacker to cause a denial of service. This c...

PT-2022-5444 · Microsoft · Windows Portable Device Enumerator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Portable Device Enumerator Service affected versions not specified Description: The issue is related to the use of a hardcoded cryptographic key in the Windows Portable Device Enumerator Service. This could allow an attacker to bypass...