PT-2023-12273 · Jocms · Jocms

Name of the Vulnerable Software and Affected Versions: jocms version 0.8 Description: The issue allows remote attackers to execute arbitrary SQL commands and view sensitive information. This is achieved via the jo json check function in jocms/apps/mask/inc/getmask.php. Recommendations: For jocms...

PT-2023-15574 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The descriptions mention an issue but do not provide specific details about it, such as its nature, potential impact, or affected systems. They appear t...

MAL-2023-185 Malicious code in cloud-functions-apply-gce-sizing-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff71f573ab0c75770c1eb1201e5e39139353eacb5afd6db5270d684e0bee416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Delta Electronics DIAScreen

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DIAScreen Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of...

PT-2025-13323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been identified in the Linux kernel, specifically in the ovs flow cmd new function. This issue arises when an allocation of a key fails, and the new flow object is not...

PT-2023-1282 · Moxa · Moxa Sds-3008 Series Industrial Ethernet Switch

Name of the Vulnerable Software and Affected Versions: Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1 Description: A denial of service issue exists in the web server functionality due to insufficient resources. Exploitation of this issue can allow a remote attacker to cause a denial ...

PT-2023-18399 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

No way of transfering Ownership/Wrong use of Interface

Lines of code Vulnerability details Impact From my understanding there is no way to change the owner which can lead to funds can be stuck if an AMM and governance change/upgrade is required. There is risk if the owner keys get compromised - also there is no progressive security if you can't chang...

PT-2023-13227 · Unknown · Btcpay Server

Name of the Vulnerable Software and Affected Versions: BTCPay Server versions 1.3.0 through 1.5.3 Description: The issue allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. This sensitive information, found in the HTML source code, includes the xpu...

PT-2023-16390 · Yaffshiv · Yaffshiv

Name of the Vulnerable Software and Affected Versions: yaffshiv versions up to 0.1 Description: A path traversal issue affects the yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory. Recommendation...

PT-2023-13549 · Docker · Docker

Name of the Vulnerable Software and Affected Versions: Docker version 20.10.15 Description: The issue allows unauthorized users outside the Docker container to access any files within the Docker container due to insecure permissions. Recommendations: For Docker version 20.10.15, consider...

PT-2023-34843 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-12348 · Unknown · Openmage Lts

Name of the Vulnerable Software and Affected Versions: OpenMage LTS versions prior to 19.4.22 OpenMage LTS versions prior to 20.0.19 Description: The issue allows admin users to execute arbitrary commands via block methods in the Custom Layout feature. This is a significant problem as it can lead...

PT-2023-19079 · Unknown · Openmage Lts

Name of the Vulnerable Software and Affected Versions: OpenMage LTS versions prior to 19.4.22 OpenMage LTS versions prior to 20.0.19 Description: The issue is related to an infinite loop in the malicious code filter under certain conditions. There are no known workarounds for this problem...

PT-2023-16278 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-13930 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

PT-2023-13894 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: A directory traversal issue exists in the httpd delfile.cgi functionality, allowing an attacker to send a specially-crafted HTTP request to delete arbitrary files. Recommendation...

PT-2023-13932 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. These vulnerabilities can be triggered by a specially-crafted netwo...

PT-2023-6700 · Ibm · Ibm Spectrum Virtualize

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Virtualize versions 8.3 through 8.5 Description: The issue is related to the disclosure of SNMPv3 server credentials through log files. This could allow a remote attacker to gain unauthorized access to protected information. The...

PT-2023-13910 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: Several stack-based buffer overflow issues exist in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command execution. An...