PT-2023-14395 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.3 Description: The issue allows a local user to escalate their privileges due to improper permission controls. Recommendations: For IBM Security Guardium version 11.3, consider restricting access to sensitive...

PT-2023-3701 · Oracle · Oracle Essbase

Name of the Vulnerable Software and Affected Versions: Oracle Essbase version 21.4.3.0.0 Description: The issue is related to insufficient input validation in the Security and Provisioning component of Oracle Essbase. Exploitation of this issue can allow an attacker to gain unauthorized access to...

PT-2024-1204

Name of the Vulnerable Software and Affected Versions webkit2gtk versions prior to 2.42.5-0ubuntu0.22.04.2 webkit2gtk3 affected versions not specified Apple products affected versions not specified Description The webkit2gtk and webkit2gtk3 engines contain a type confusion flaw. This issue is...

PT-2023-4053

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 11.0.19, 17.0.7, 20.0.1 Oracle GraalVM Enterprise Edition versions 20.3.10, 21.3.6, 22.3.2 Oracle GraalVM for JDK versions 17.0.7, 20.0.1 Description The issue is related to the Networking component of the affected...

PT-2023-19886 · WordPress · Ankit Social Media Icons Widget

Name of the Vulnerable Software and Affected Versions: a.Ankit Social Media Icons Widget plugin versions 1.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-4489 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue is related to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it. This is due to an unlimited file...

PT-2023-15082 · Sitealert · Sitealert

Name of the Vulnerable Software and Affected Versions: SiteAlert plugin versions = 1.9.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

PT-2023-7494 · Hazelcast · Hazelcast

Name of the Vulnerable Software and Affected Versions: Hazelcast versions 5.0 through 5.0.4 Hazelcast versions 5.1 through 5.1.6 Hazelcast versions 5.2 through 5.2.3 Hazelcast IMDG versions prior to 4.2.z Description: The issue is related to insufficient authorization procedures in Hazelcast,...

PT-2025-13943

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iPadOS versions prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Safari versions prior to 18.4 Description The issue was...

PT-2025-20746

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5 Description The issue was...

PT-2025-20759

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iPadOS versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18...

PT-2025-20766

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 and versions prior to 18.5 iOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5...

PT-2023-10358 · Undefined · Undefined

ParsedReport ChatGPT Translated Autotext: RSTReportsAnalyser + ChatGPT + Google Translate|DeepL ------ Основная идея: В данной статье рассматривается недавняя активность GuLoader или ModiLoader/DBatLoader и приводятся индикаторы компрометации IOC для заражения Formbook "QM18". В статье также...

PT-2023-13492 · Nikola Loncar · Easyappointments

Name of the Vulnerable Software and Affected Versions: Nikola Loncar Easy Appointments plugin versions prior to 3.11.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-3708

Name of the Vulnerable Software and Affected Versions mongoose versions prior to 7.3.4 mongoose versions prior to 6.11.3 mongoose versions prior to 5.13.20 Description The issue is related to a prototype pollution vulnerability in the Mongoose library. This vulnerability can be exploited by a...

PT-2023-25433 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted php file to the osghsadminimages file. This is a result of a file upload vulnerability...

CVE-2023-25770

Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-26597 Controller DOS on sending error response

Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-25178 Controller design flaw - unsigned firmware

Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning...

CVE-2023-24480 Controller stack overflow when decoding messages from the server

Controller DoS due to stack overflow when decoding a message from the server. See Honeywell Security Notification for recommendations on upgrading and versioning...