PT-2023-6830

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.2.1 SPIP versions 3.2.18 through 4.0.10 SPIP versions 4.1.8 through 4.2.1 SPIP version 3.2.11-3+deb11u7 Description SPIP is susceptible to a flaw related to the improper handling of untrusted data during memory...

PT-2023-12200 · Umbraco · Umbraco Forms

Name of the Vulnerable Software and Affected Versions: Umbraco Forms version 8.7.0 Description: The issue allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file. This is a result of a file upload vulnerability. Recommendations: For Umbraco Forms version...

PT-2023-12551 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further details are available regarding the issue...

PT-2023-16571 · Opennms · Opennms Meridian +1

Name of the Vulnerable Software and Affected Versions: OpenNMS Meridian versions prior to 2023.1.0 OpenNMS Horizon versions prior to 31.0.4 Description: Multiple stored and reflected cross-site scripting vulnerabilities in webapp jsp pages could allow an attacker access to confidential session...

PT-2023-13560 · Hewlett Packard · Hpe Serviceguard Manager

Name of the Vulnerable Software and Affected Versions: Serviceguard Manager affected versions not specified Description: The issue is related to an unauthenticated Java deserialization vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2023-10405 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not...

PT-2023-19397 · H3C · H3C A210-G

Name of the Vulnerable Software and Affected Versions: H3C A210-G version A210-GV100R005 Description: The issue is related to access control, allowing attackers to authenticate without a password. Recommendations: For H3C A210-G version A210-GV100R005, consider restricting access to the device...

PT-2023-8929 · Opennms · Opennms Horizon +1

Name of the Vulnerable Software and Affected Versions: OpenNMS Meridian versions prior to 2023.1.0 OpenNMS Horizon versions prior to 31.0.4 Description: The issue is related to unauthenticated, stored cross-site scripting in the display of alarm reduction keys, which could allow an attacker to...

PT-2023-10415 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The provided information does not contain details about a specific vulnerability, but rather a notification about a rejected CVE candidate number. There is no general information about...

PT-2023-12057 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not...

PT-2023-36092 · Ftp · Ftp

Name of the Vulnerable Software and Affected Versions: ftp affected versions not specified Description: The ftp crate is no longer maintained. It is recommended to use the suppaftp crate instead. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2023-35992 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-35998 · Git +1 · Libgit2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow read. Technical details include a crash type of Heap-buffer-overflow READ and a crash state involving...

Two Supreme Court cases could change the Internet as we know it

The Supreme Court is about to reconsider Section 230, a law thats been the foundation of the way we have used the Internet for decades. The court will be handling a few cases that at first glance are about online platforms' liability for hosting accounts from foreign terrorists. But at a deeper...

Akamai’s Perspective on February’s Patch Tuesday 2023

Every Patch Tuesday stirs up the community. Read Akamai's insights and recommendations for February 2023. Learn what to focus on, and patch, patch, patch!...

Early staker can disable staking by issuing and sending a bit to Furance

Lines of code Vulnerability details This one is caused by mitigation to issue M-05 Impact Early issuer can issue less than one wad e.g. 9e17 wei and send it to the Furnace contract, then whenever anyone is trying to issue more RTokens melt would be called, since there’s less than 1 wad in total...

PT-2023-16295 · Resteasy +4 · Resteasy +4

Name of the Vulnerable Software and Affected Versions: RESTEasy versions prior to 7.0.0.Alpha1 RESTEasy versions prior to 6.2.3.Final RESTEasy versions prior to 5.0.6.Final RESTEasy versions prior to 4.7.8.Final RESTEasy versions prior to 3.15.5.Final Description: The issue arises from the use of...

PT-2023-16598 · WordPress · The Wp Coder

Name of the Vulnerable Software and Affected Versions: The WP Coder – add custom html, css and js code plugin for WordPress versions up to, and including, 2.5.3 Description: The issue is related to time-based SQL Injection via the id parameter due to insufficient escaping on the user-supplied...

PT-2023-19844 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a local user to obtain sensitive information from log files. Recommendations: For IBM InfoSphere Information Server version 11.7, consider restricting access to log...

PT-2023-7426 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0.0 through 6.0.16 FortiOS versions 6.2.0 through 6.2.12 FortiOS versions 6.4.0 through 6.4.11 FortiOS versions 7.0.0 through 7.0.8 FortiOS versions 7.2.0 through 7.2.2 FortiProxy versions 1.1.0 through 1.1.6 FortiProxy...