6741 matches found
PT-2023-2899 · Apple +9 · Macos Ventura +16
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 Safari versions prior to 16.5 Description: A...
PT-2023-12917 · WordPress · Atlas Gondal Export All Urls
Name of the Vulnerable Software and Affected Versions: Atlas Gondal Export All URLs plugin versions = 4.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with editor or higher privileges. Recommendations: For Atlas Gondal Expor...
PT-2023-15062 · Unknown · Gopi Ramasamy Continuous Announcement Scroller Plugin
Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Continuous announcement scroller plugin versions = 13.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the Gop...
PT-2023-14059 · Intel · Intel Dcm
Name of the Vulnerable Software and Affected Versions: IntelR DCM software versions prior to 5.1 Description: The issue is related to an uncontrolled search path in the IntelR DCM software, which may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-19203 · Premmerce · Premmerce Redirect Manager
Name of the Vulnerable Software and Affected Versions: Premmerce Premmerce Redirect Manager plugin versions prior to 1.0.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Premmerce...
PT-2023-6473 · Go +7 · Go +7
Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.21.2 Go versions prior to 1.20.9 Description: The issue is related to the "//line" directive in the Go programming language, which can be exploited to bypass restrictions on "//go:cgo " directives. This allows blocked...
PT-2023-2625
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A security-feature bypass issue exists in the Secure Boot implementation of Windows operating systems. The problem is related to errors in accessing debugging functions during the boot proces...
Intel® NUC Laptop Element Software Advisory
Summary: Potential security vulnerabilities in some Intel® NUC Laptop Element software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41687 Description: Insecure inherited permissions in th...
Intel® EMA Software Advisory
Summary: A potential security vulnerability in the Intel® Endpoint Management Assistant EMA software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-45128 Description: Improper authorization in the...
PT-2025-25924 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.0-rc6 Description: The issue is related to the rxrpc's sendmsg implementation in the Linux kernel, where three bugs have been identified and fixed. These bugs concern locking mechanisms, specifically the...
PT-2025-26077 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.5-00039-g2fd9ae1b568c Description: A vulnerability in the Linux kernel has been resolved, which was causing a random warning message when the driver loads. The warning log indicates an unexpected gfp value,...
PT-2023-22946 · Sap · Sap Crm +1
Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102 through S4FND 107, WEBCUIF 700 through WEBCUIF 801 Description: The issue arises from insufficient encoding of user-controlled inputs, leading to a stored Cross-Site Scripting XSS vulnerability. An...
PT-2023-21946 · Sap · Sap Businessobjects Bi Platform
Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Platform versions 420, 430 Description: The Information design tool in SAP BusinessObjects Platform transmits sensitive information as cleartext in the binaries over the network. This could allow an unauthenticated attacke...
Intel® QAT Engine for OpenSSL Advisory
Summary: A potential security vulnerability in the Intel® QuickAssist Technology QAT Engine for OpenSSL may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-43507 Description: Improper buffer...
PT-2023-23461 · Unknown · Chamilo Lms
Name of the Vulnerable Software and Affected Versions: Chamilo Lms version 1.11.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the forum title parameter. This enables the attacker to inject malicious scripts into the website, potentially leading...
PT-2023-15754 · Unknown · Engineermode Services
Name of the Vulnerable Software and Affected Versions: engineermode service affected versions not specified Description: The issue is related to a possible missing permission check in the engineermode service. This could lead to a local denial of service with no additional execution privileges...
PT-2023-22151 · Siemens · Simatic Cloud Connect 7 Cc712 +1
Name of the Vulnerable Software and Affected Versions: SIMATIC Cloud Connect 7 CC712 versions 2.0 through 2.1 SIMATIC Cloud Connect 7 CC716 versions 2.0 through 2.1 Description: A vulnerability has been identified where the affected device uses a hard-coded password to protect diagnostic files...
PT-2023-23574 · Unknown · Android Capture App +1
Name of the Vulnerable Software and Affected Versions: DHIS2 Core versions 2.35 through 2.36.12 DHIS2 Core versions 2.37 through 2.37.7 DHIS2 Core versions 2.38 through 2.38.1 DHIS2 Core versions 2.39 through 2.39.0 exclusive of 2.39.0, as 2.39.0 contains a fix Description: The issue arises when...
Intel® EMA Configuration Tool and Intel® MC Software Advisory
Summary: A potential security vulnerability in Intel® Endpoint Management Assistant EMA Configuration Tool and Intel® Manageability Commander MC software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID:...
Intel® IPP Cryptography Advisory
Summary: Potential security vulnerabilities in Intel® Integrated Performance Primitives IPP Cryptography software may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37409 Description: Insufficie...