Intel® ON Event Series Android App Advisory

Summary: A potential security vulnerability in the Intel® ON Event Series Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-41614 Description: Insufficiently protected...

PT-2023-19257 · Sap · Sap Businessobjects Business Intelligence

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence version 430 Description: The issue affects the Web Intelligence user interface, where certain calls return JSON with an incorrect content type in the response header. This can make custom applications...

PT-2023-15541 · Jt Open +1 · Jt Open +1

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to 11.2.3.0 JT Utilities versions prior to 13.2.3.0 Description: A memory corruption issue has been identified in the affected application when parsing specially crafted JT files. This could allow an attacker to execute...

PT-2023-1389

Name of the Vulnerable Software and Affected Versions HAProxy versions prior to 2.7.3 HAProxy versions prior to 2.6.9 HAProxy versions prior to 2.5.12 HAProxy versions prior to 2.4.22 HAProxy versions prior to 2.2.29 HAProxy versions prior to 2.0.31 Description The issue is related to the handlin...

PT-2023-6671 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to V223.0Update2 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end of an allocated...

PT-2023-19676 · Sap · Sap Fiori Apps For Travel Management +1

Name of the Vulnerable Software and Affected Versions: SAP Fiori apps for Travel Management in SAP ERP My Travel Requests version 600 Description: The issue allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally...

PT-2023-35276 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.231 Description: The issue concerns the x86/i8259 legacy PIC interrupts. It has been marked with IRQ LEVEL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-16450 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

PT-2023-33000 · Unknown · Http-Cache-Semantics +1

Name of the Vulnerable Software and Affected Versions: http-cache-semantics versions prior to 4.1.1 cacheable-request versions prior to 10.2.7 Description: The issue is related to an Inefficient Regular Expression Complexity in http-cache-semantics, which can lead to Denial of Service. This can b...

PT-2023-6708 · D Link · D-Link N300 Wi-Fi Router Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description: The issue is related to a stack overflow in the D-Link N300 WI-FI Router DIR-605L, which can be triggered via the curTime parameter at the "/goform/formSetRoute" API endpoint. Thi...

PT-2023-13409 · Dell · Powerpath Management Appliance

Name of the Vulnerable Software and Affected Versions: PowerPath Management Appliance versions 3.2 through 3.3 Description: The issue allows authenticated admin users to exploit a Hardcoded Cryptographic Keys problem, leading to the ability to view and modify sensitive information stored in the...

PT-2023-1709 · Sap · Sap Businessobjects

Name of the Vulnerable Software and Affected Versions: SAP Business Object Adaptive Job Server versions 420, 430 Description: The issue allows remote execution of arbitrary commands on Unix systems when program objects execution is enabled. This can be done by authenticated users with scheduling...

PT-2023-18210 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow for Android versions prior to 4.9.04 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For versions prior...

PT-2023-14113 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0.0 through 9.3.0 Description: The issue allows a local user to obtain sensitive information from diagnostic files. Recommendations: For IBM MQ versions 8.0.0 through 9.3.0, update to a version that includes the fix for this...

WordPress Metform Elementor Contact Form Builder 3.1.2 Cross Site Scripting Vulnerability

WordPress Metform Elementor Contact Form Builder plugin versions 3.1.2 and below suffer from a persistent cross site scripting vulnerability. Affected Plugin: Metform Elementor Contact Form Builder Plugin Slug: metform Affected Versions: = 3.1.2 CVE ID: CVE-2023-0084 CVSS Score: 7.2 High CVSS...

PT-2023-14967 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2023-1580 · Dell · Dell Command | Intel Vpro Out Of Band

Name of the Vulnerable Software and Affected Versions: Dell Command Intel vPro Out of Band versions prior to 4.3.1 Description: The issue is related to an Improper Authorization vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to write arbitrary...

PT-2023-19973

Name of the Vulnerable Software and Affected Versions Apache Kafka Connect versions prior to 3.4.0 Apache Kafka versions 2.3.0 through 3.3.x Bitbucket Data Center and Server versions 7.21.0 through 8.12.0 Description A possible security vulnerability has been identified in Apache Kafka Connect AP...

PT-2023-19468 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the redirect parameter in the login.php file. Cross-site scripting XSS is a type of securit...

PT-2023-19789 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It mentions a rejected CVE candidate number, indicating that the...