PT-2023-22885 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is an out-of-bounds write in the RmtUimApdu of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations: For versions prior to SMR Aug-2023...

PT-2023-22895 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is caused by improper input validation in the IpcTxGetVerifyAkey function, allowing an attacker to cause an out-of-bounds write. Recommendations: For versions prior to...

PT-2023-23700 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper access control in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable denial of service via local access...

GaugeController.remove_gauge() may indefinitely trap user voting power

Lines of code Vulnerability details Impact Users will permanently lose voting power equal to their power used to vote in the removed gauge unless the gauge is re-added and users re-vote to remove their voting power from the gauge. Proof of Concept GaugeController.sol does not have any function fo...

PT-2023-22882 · Samsung · Samsung Telecom

Name of the Vulnerable Software and Affected Versions: Samsung Telecom versions prior to SMR Aug-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to call the "acceptRingingCall" API without permission. Recommendations: For versions prior to SMR...

PT-2023-25526 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the column parameter of "index.php" in PHPJabbers Document Creator. Recommendations: For PHPJabbers Document Creator version 1.0, avoid using th...

PT-2023-21586 · Dsm · Dsm

Name of the Vulnerable Software and Affected Versions: Desktop & Server Management DSM versions prior to 2022.2 SU2 Description: The issue allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user. This could potentially lead to the execution of...

PT-2023-27342 · Unknown · Archimate Archi

Name of the Vulnerable Software and Affected Versions: ArchiMate Archi versions prior to 5.1.0 Description: An NTLM Hash Disclosure issue was discovered. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access t...

PT-2023-25940 · WordPress · Sudipto Pratap Mahato Simple Light Weight Social Share

Name of the Vulnerable Software and Affected Versions: Sudipto Pratap Mahato Simple Light Weight Social Share plugin versions = 2.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject...

Session Fixation in Guardian/CMC before 22.6.2

Summary In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session. Impact Unauthorized...

PT-2023-25533 · Unknown · Kunduz - Homework Helper App

Name of the Vulnerable Software and Affected Versions: Kunduz - Homework Helper App versions prior to 6.2.3 Description: The issue affects the Kunduz - Homework Helper App, allowing for authentication abuse and authentication bypass due to the use of a hard-coded cryptographic key. This enables...

PT-2023-26375 · Lwsystems · Lwsystems Benno Mailarchiv

Name of the Vulnerable Software and Affected Versions: LWsystems Benno MailArchiv version 2.10.1 Description: An issue was discovered in LWsystems Benno MailArchiv, where attackers can cause cross-site scripting XSS via JavaScript content to a mailbox. Recommendations: For LWsystems Benno...

Fortinet Releases Security Update for FortiOS

Fortinet has released a security update to address a vulnerability CVE-2023-29182 affecting FortiOS. A remote attacker can exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the Fortinet security release FG-IR-23-149link is externa...

PT-2023-4690 · Unknown · Sicam Toolbox Ii

Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.10 Description: A vulnerability has been identified in the SICAM TOOLBOX II application, where the database service is executed as NT AUTHORITYSYSTEM. This could allow a local attacker to execute operati...

PT-2023-19908 · Anadnet · Anadnet Quick Page/Post Redirect Plugin

Name of the Vulnerable Software and Affected Versions: Anadnet Quick Page/Post Redirect Plugin plugin versions = 5.2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Anadnet Quick...

PT-2023-4642 · Adobe · Acrobat Document Cloud +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Adobe Acrobat Document Cloud Adobe Acrobat Reader Document Cloud Description: The issue...

PT-2023-25614 · Zoom · Zoom Client

Name of the Vulnerable Software and Affected Versions: Zoom Clients versions prior to 5.14.5 Description: The issue is related to a buffer overflow that may allow an unauthenticated user to cause a denial of service via network access. Recommendations: For versions prior to 5.14.5, update to...

PT-2023-23705 · Getbutton.Io · Getbutton Chat Button

Name of the Vulnerable Software and Affected Versions: GetButton Chat Button by GetButton.Io plugin versions 1.8.9.4 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject...

AMD Ryzen™ Master Security Bulletin

Bulletin ID: AMD-SB-7004 Potential Impact: Varies by CVE, see descriptions below Severity: V aries by CVE, see descriptions below Summary AMD Ryzen™ Master is a software tool that provides users access to advanced settings, such as clock and voltage settings, to control system performance in...

Intel® oneMKL Software Advisory 

Summary: Potential security vulnerabilities in some Intel® oneAPI Math Kernel Library oneMKL may allow ecsalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-25864 Description: Uncontrolled search path in so...