PT-2023-11538 · Kevinpapst · Kimai2

Name of the Vulnerable Software and Affected Versions: kevinpapst kimai2 version 1.30.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to gain escalated privileges. This vulnerability is located in the /src/Twig/Runtime/MarkdownExtension.php...

B&R Systems Diagnostics Manager Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple XSS Vulnerabilities product: B&R Systems Diagnostics Manager vulnerable version: =3.00 and =D4.93 CVE number: CVE-2022-4286 impact: medium homepage:...

CVE-2023-25141 JNDI injection into Apache sling-org-apache-sling-jcr-base

Apache Sling JCR Base 3.1.12 has a critical injection vulnerability when running on old JDK versions JDK 1.8.191 or earlier through utility functions in RepositoryAccessor. The functions getRepository and getRepositoryFromURL allow an application to access data stored in a remote location via JDN...

JSA10445 - 2010-06 Security Bulletin: Pulse Connect Secure (PCS) Cross Site Scripting Issue in Windows Secure Application Manager

Last Modified Date Aug 24, 2026 12:34:51 AM...

JSA10482 - 2011-07 Out of Cycle Security Bulletin: Multiple Products; TLS/SSL Renegotiation Vulnerability (CVE-2009-3555)

Last Modified Date Aug 24, 2026 12:34:49 AM...

JSA10399 - Security Vulnerability in Pulse Policy Secure (PPS) software's radius authentication mechanism

Last Modified Date Aug 24, 2026 12:35:04 AM...

PT-2023-3244 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0006 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted...

PT-2023-3274 · Schneider Electric · Struxureware Data Center Expert

Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: The issue is related to insufficient protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting attack in the DCE file upload endpoin...

PT-2023-20162 · Unknown +5 · Gss-Ntlmssp +5

Name of the Vulnerable Software and Affected Versions: GSS-NTLMSSP versions prior to 1.2.0 Description: The issue is related to memory corruption that can be triggered when decoding UTF16 strings. The variable outlen was not initialized, which could cause writing a zero to an arbitrary place in...

PT-2023-20161 · Unknown +6 · Gss-Ntlmssp +6

Name of the Vulnerable Software and Affected Versions: GSS-NTLMSSP versions prior to 1.2.0 Description: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit...

PT-2023-3249 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0006 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted...

PT-2023-6670 · Siemens · Solid Edge Se2022 +1

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to V223.0Update2 Description: A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an o...

PT-2023-3253 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0006 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted...

PT-2023-14218 · Unknown · Orchestrated Corona Virus (Covid-19) Banner & Live Data

Name of the Vulnerable Software and Affected Versions: Orchestrated Corona Virus COVID-19 Banner & Live Data plugin versions 1.7.0.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-3256 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0006 Description: The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code ...

PT-2023-19449 · Totolink · Totolink Ca300-Poe

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884 Description: A command injection issue was discovered via the webWlanIdx parameter in the setWebWlanIdx function. This allows for potential command injection attacks. Recommendations: For TOTOLINK CA300-PoE...

PT-2023-3515 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: LibTIFF versions 4.5.0 and earlier Description: The issue is related to a heap-based use after free in the loadImage function, located in tools/tiffcrop.c, which can be triggered by a crafted TIFF image. This can potentially allow an attacker...

PT-2023-34951 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to an errant WARN ON ONCE in the j1939 session deactivate function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.1...

PT-2023-34977 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns a potential Spectre v1 gadget in the ip metrics convert function. This could potentially be exploited, although the actual impact and attack plausibility have not yet been...

PT-2023-34939 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.1 through v6.1.10 Description: The issue is related to the USB Type-C UCSI driver in the Linux Kernel. It occurs when the system attempts to resume ports before they exist, potentially leading to undefined behavior...