Intel® ISPC Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Implicit SPMD Program Compiler ISPC software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-27509 Description: Improper...

Intel® Unite® Software Advisory

Summary: Potential security vulnerabilities in some Intel® Unite® software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25773 Description: Improper access control in the IntelR UniteR Hub...

Intel® PCSD BIOS Advisory

Summary: A potential security vulnerability in some Intel® Product Collaboration and Systems Division PCSD system BIOS may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-34657 Description: Improper...

isDeprecated CAN ONLY BE MADE TO true AND CAN NOT BE CHANGED TO false IN THE FUTURE IF THE NEED ARISES

Lines of code Vulnerability details Impact The RoeRouter.deprecatePool function is used to Deprecate a pool. It is a onlyOwner modifier controlled function. A pool can be deprecated via the deprecatePool function as shown below: function deprecatePooluint poolId public onlyOwner...

PT-2023-5108 · Vim +3 · Vim +3

Name of the Vulnerable Software and Affected Versions: vim versions 9.0.1367-1 through 9.0.1367-3 Description: The issue is related to a divide by zero error in the vim text editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: For versions 9.0.1367-...

cleanup() does not properly handle debt repayment

Lines of code Vulnerability details Impact The cleanup... function in the PositionManager.sol contract is used to deposit remaining users assets back to ROE, repaying debt if any. However the users debt will not be repaid if the user has debt leading to loss of funds for the lenders and the proje...

PT-2023-35506 · Tryton · Tryton

Name of the Vulnerable Software and Affected Versions: trytond versions prior to 6.0.34 Description: The issue is related to a security bugfix release. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2023-35508 · Oracle · Virtualbox

Name of the Vulnerable Software and Affected Versions: VirtualBox versions prior to 7.0.10 Description: This issue affects VirtualBox, a virtualization software. The problem is related to several bugs and improvements in the software, including fixes for the VMM, GUI, TPM, and 3D graphics. There ...

PT-2023-15027 · Stormshield · Stormshield Ssl Vpn Client

Name of the Vulnerable Software and Affected Versions: Stormshield SSL VPN Client versions prior to 3.2.0 Description: A logged-in user, able to only launch the VPNSSL Client, can use the OpenVPN instance to execute malicious code as administrator on the local machine. Recommendations: For versio...

PT-2023-26152 · WordPress · Woocommerce Shipping Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses plugin versions prior to 3.8.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for...

PT-2023-27018 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue concerns a Cross-Site Scripting XSS problem. Recommendations: For PHPGurukul Online Security Guards Hiring System version 1.0, at the moment, there is no...

PT-2023-26556 · Unknown · Matrix-Appservice-Bridge

Name of the Vulnerable Software and Affected Versions: matrix-appservice-bridge versions 4.0.0 through 8.1.1 matrix-appservice-bridge versions 9.0.0 Description: A malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the...

PT-2023-26720 · Jeesite · Jeesite

Name of the Vulnerable Software and Affected Versions: jeesite version 1.2.6 Description: An issue in the delete function in the ActModelController class allows authenticated attackers to arbitrarily delete models created by the Administrator. Recommendations: For jeesite version 1.2.6, consider...

PT-2023-13413 · Dell · Dell Xtremio X2 Xms

Name of the Vulnerable Software and Affected Versions: Dell XtremIO X2 XMS versions prior to 6-4-1.11 Description: The issue is related to improper access control, allowing a remote read-only user to potentially exploit it and perform actions such as adding or deleting QoS policies, which are...

PT-2023-26814 · Crocoblock · Crocoblock Jetelements For Elementor

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions 2.6.10 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability. This allows for code injection, which can be exploited by attacker...

PT-2023-27869 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.1.0 Description: The issue concerns weak password requirements in the GitHub repository answerdev/answer. Recommendations: For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue...

PT-2023-25485 · Xoops Cms · Xoops Cms

Name of the Vulnerable Software and Affected Versions: Xoops CMS version 2.5.10 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the category name field of the image manager function. This enables the attacker to inject malicious scripts into the...

PT-2023-25497 · Eramba · Eramba

Name of the Vulnerable Software and Affected Versions: Eramba versions 3.19.1 Description: The issue allows a remote attacker to execute arbitrary code via the path parameter in the URL. This can be exploited by manipulating the URL to inject malicious code. Recommendations: For version 3.19.1, a...

PT-2023-26365 · Oxid · Oxid Eshop Enterprise Edition

Name of the Vulnerable Software and Affected Versions: OXID eShop Enterprise Edition versions 6.5.0 through 6.5.2 Description: The issue allows uploading files with modified headers in the administration area, enabling an attacker to create a HTTP Response Splitting attack by uploading a file wit...

Risk of Incorrect Collateral Pricing in Case of Aggregator Reaching minAnswer

Lines of code Vulnerability details Impact Chainlink aggregators have a built-in circuit breaker to prevent the price of an asset from deviating outside a predefined price range. This circuit breaker may cause the oracle to persistently return the minPrice instead of the actual asset price in the...