PT-2023-17154 · Linagora · Linagora/Twake

Name of the Vulnerable Software and Affected Versions: linagora/twake version prior to 0.0.0. Description: The issue concerns an improper restriction of excessive authentication attempts. This means that the system does not adequately limit the number of login attempts, potentially allowing for...

PT-2023-35735 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE, with a crash state involving the processCertificateElements function in the fuzz tls certificate.c...

PT-2023-2961

Name of the Vulnerable Software and Affected Versions LB-LINK BL-AC1900 2.0 version 1.0.1 LB-LINK BL-WR9000 version 2.4.9 LB-LINK BL-X26 version 1.2.5 LB-LINK BL-LTE300 version 1.0.8 Description The issue is related to a command injection vulnerability via the mac, time1, and time2 parameters at...

PT-2023-17798 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In multiple locations of p2p iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. Us...

PT-2023-14128 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing bounds check in Pixel cellular firmware, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges...

Center for Internet Security (CIS) unveils Azure Foundations Benchmark v2.0.0

The Center for Internet Security CIS recently unveiled the latest version of their Azure Foundations Benchmark—Version 2.0.0. This is the first major release since the benchmark was originally released more than 4 years ago, which could lead you to believe that this update would come with a bunch...

PT-2023-7476 · Unknown · Osprey Pump Controller

Name of the Vulnerable Software and Affected Versions: Osprey Pump Controller version 1.01 Description: The issue is related to a weak session token generation algorithm that can be predicted, potentially allowing an attacker to hijack a session by predicting the session id and gain unauthorized...

PT-2023-13490 · Zoho · Zoho Manageengine Adselfservice Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions through 6203 Description: The issue allows for a brute-force attack, leading to a password reset on IDM applications. This is a result of a weakness in the password reset mechanism, which can be...

PT-2023-21894 · Jenkins · Jenkins Octoperf Load Testing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OctoPerf Load Testing Plugin Plugin versions 4.5.2 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This can...

PT-2023-11437 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected candidate number. There is no general information about an issue, estimated number of...

PT-2023-14723 · Megafeis +1 · Megafeis +1

Name of the Vulnerable Software and Affected Versions: MEGAFEIS, BOFEI DBD+ Application for IOS & Android version 1.4.4 Description: An issue in the MEGAFEIS, BOFEI DBD+ Application allows an authenticated attacker to gain access to sensitive account information. Recommendations: For version 1.4....

PT-2023-2266 · Cisco · Cisco Access Points

Name of the Vulnerable Software and Affected Versions: Cisco access points AP software affected versions not specified Description: A vulnerability in Cisco access points software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This...

PT-2023-14376 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.4 through 7.5 Description: The issue allows a user with some admin capabilities to gain additional admin capabilities through privilege escalation. Recommendations: For versions 7.4 and 7.5, update to a version that...

PT-2023-11461 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2023-21272 · Prestashop · Tshirtecommerce

Name of the Vulnerable Software and Affected Versions: tshirtecommerce aka Custom Product Designer component version 2.1.4 for PrestaShop Description: An issue was discovered in the tshirtecommerce component, where an HTTP request can be forged with a compromised product id GET parameter to explo...

PT-2023-20326 · Nextcloud +1 · Nextcloud Enterprise Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 24.0.x through 24.0.9 Nextcloud Server versions 25.0.x through 25.0.4 Nextcloud Enterprise Server versions 21.x through 21.0.9.9 Nextcloud Enterprise Server versions 22.x through 22.2.0.9 Nextcloud Enterprise Server...

PT-2023-3595

Name of the Vulnerable Software and Affected Versions Ruby URI component versions prior to 0.12.1 Ruby URI component versions prior to 0.11.1 Ruby URI component versions prior to 0.10.2 Ruby URI component version 0.10.0 Description The issue is related to the incorrect implementation of handling...

PT-2023-2000 · NetGear · Netgear Orbi Router Rbr750

Name of the Vulnerable Software and Affected Versions: Netgear Orbi Router RBR750 version 4.6.8.5 Description: A command execution issue exists in the hidden telnet service functionality. This can be exploited by sending a specially-crafted network request, potentially allowing an attacker to...

PT-2023-14044 · WordPress · Tcbarrett Glossary

Name of the Vulnerable Software and Affected Versions: TCBarrett WP Glossary plugin versions prior to 3.1.2 Description: A Cross-Site Scripting issue affects the TCBarrett WP Glossary plugin, allowing unauthorized access for users with contributor or higher permissions. Recommendations: For...

PT-2023-19532 · Temenos · Temenos T24

Name of the Vulnerable Software and Affected Versions: Temenos T24 Release 20 Description: The issue concerns incorrect access control, potentially allowing attackers to gain unauthorized access to sensitive information. This can be achieved via a crafted POST request to the "HELPTEXT.MAINMENU"...