PT-2023-11504 · Hdf5 +1 · Hdf5 +1

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.4 Description: The issue allows remote attackers to run arbitrary code via the creation of a crafted file, exploiting a Buffer Overflow vulnerability in the H5S close function in H5S.c. Recommendations: For HDF5 version...

PT-2023-27106

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06 Description A stack overflow issue was discovered via the time parameter in the sscanf function. Recommendations For Tenda AC8V4 version 16.03.34.06, consider restricting access to the sscanf function until a...

PT-2023-4712 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 4.1M2 through 14.10.4 XWiki Platform versions prior to 14.10.5 and 15.1RC1 Description: The issue is related to a stored XSS vulnerability that can be exploited by any registered user through their user profile by...

PT-2023-26715 · Weaviate · Weaviate

Name of the Vulnerable Software and Affected Versions: Weaviate versions 1.20.0 and earlier Description: The issue is a type conversion problem that allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. This affects users of Weaviate Server versions...

PT-2023-26674 · Berkaygediz · Oblog

Name of the Vulnerable Software and Affected Versions: berkaygediz O Blog version 1.0 Description: The issue allows a local attacker to escalate privileges via the secure file priv component. This is a SQL injection vulnerability. Recommendations: For berkaygediz O Blog version 1.0, consider...

PT-2023-27248 · Elecom · Elecom Wireless Access Points

Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN access point devices affected versions not specified WAB-S600-PS all versions WAB-S300 all versions Description: The issue allows an authenticated user to execute an arbitrary OS command by sending a specially crafted...

PT-2023-25760 · Adm · Adm

Name of the Vulnerable Software and Affected Versions: ADM versions 4.0.6.RIS1 through 4.1.0 ADM versions 4.2.2.RI61 and below Description: The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and delete...

PT-2023-5858 · Supermicro · Supermicro X11 Series

Name of the Vulnerable Software and Affected Versions: Supermicro X11 series versions 1.66 Description: The issue exists due to the lack of protection for the web page structure in the web interface of Supermicro X11 series BMC IPMI servers. This allows a remote attacker to exploit an XSS issue a...

PT-2023-23822 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2x through 9.5x Description: A local attacker with high privileges could potentially exploit this issue to bypass mode protections and gain elevated privileges. The issue is related to a privilege escalation...

PT-2023-23828 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.0.x through 9.5.x Description: The issue is related to an improper handling of insufficient privileges, which could be exploited by a local privileged attacker to elevate privileges. This vulnerability also...

PT-2023-6517 · Dell · Dell Storage Integration Tools For Vmware +2

Name of the Vulnerable Software and Affected Versions: Dell Storage Integration Tools for VMware DSITV versions prior to 6.1.1 Dell Storage vSphere Client Plugin DSVCP versions prior to 6.1.1 Replay Manager for VMware RMSV versions prior to 3.1.2 Description: The issue is related to an informatio...

PT-2023-26644 · Comfast · Comfast Cf-Xr11

Name of the Vulnerable Software and Affected Versions: COMFAST CF-XR11 version 2.7.2 Description: An issue in the software allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub 410074 function at bin/webmgnt. Recommendations: For COMFAST CF-XR11 version 2.7.2,...

PT-2023-27129 · Unknown · Suleve 5-In-1 Smart Door Lock

Name of the Vulnerable Software and Affected Versions: Suleve 5-in-1 Smart Door Lock version v1.0 Description: The issue is related to missing encryption in the RFID tag of the Suleve 5-in-1 Smart Door Lock, which allows attackers to create a cloned tag via brief physical proximity to the origina...

PT-2023-26646 · Comfast · Comfast Cf-Xr11

Name of the Vulnerable Software and Affected Versions: COMFAST CF-XR11 version 2.7.2 Description: The issue is a command injection vulnerability detected at function sub 4143F0. Attackers can send POST request messages to "/usr/bin/webmgnt" and inject commands into parameter timestr...

PT-2023-26685 · Wolf Leo · Wolf-Leo Easyadmin8

Name of the Vulnerable Software and Affected Versions: Wolf-leo EasyAdmin8 version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the upload type function. This is a result of a File Upload vulnerability in the software. Recommendations: For Wolf-leo EasyAdmin8...

PT-2023-27128 · Digoo · Digoo Dg-Hamb Smart Home Security System

Name of the Vulnerable Software and Affected Versions: Digoo DG-HAMB Smart Home Security System version 1.0 Description: The issue is related to missing encryption in the RFID tag of the system, allowing attackers to create a cloned tag via brief physical proximity to the original device. This ca...

PT-2023-22721 · Kiboko · Kiboko Labs Watu Quiz Plugin

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Watu Quiz plugin versions = 3.3.9.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

PT-2023-21752 · Tigergraph · Tigergraph Enterprise

Name of the Vulnerable Software and Affected Versions: Tigergraph Enterprise version 3.7.0 Description: An issue was discovered in Tigergraph Enterprise where a single instance can host multiple graphs accessed by multiple users. The platform does not protect the confidentiality of uploaded data,...

PT-2023-22219 · Intel · Intel Realsense Id

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA version 0.25.0 Description: The issue is related to an unchecked return value in some IntelR RealSenseTM ID software, which may allow a privileged user to potentially enable denial ...

PT-2023-13332 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No detailed information is provided about the issue, such as general information, estimated number of potentially affected devices worldwide, or...