Design/Logic Flaw

In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40142

In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-6405 · Yifan · Yifan Yf325

Name of the Vulnerable Software and Affected Versions: Yifan YF325 version 1.0 20221108 Description: A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality. This issue can be triggered by a specially crafted network packet, potentially leading to command...

Juniper Junos OS Multiple Vulnerabilities (JSA73162)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA73162 advisory. - An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine pfe of Juniper Networks Junos OS Evolved on PTX10003 Series allows an...

PT-2025-14468 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 6.5.0 through 6.5.1, 6.6.0 through 6.6.3, 6.7.0 through 6.7.2, 7.0.0 Description: A relative path traversal issue allows an attacker to escalate privileges via uploading certain GUI elements. This issue can be...

PT-2023-6253 · Yifan · Yifan Yf325

Name of the Vulnerable Software and Affected Versions: Yifan YF325 version 1.0 20221108 Description: A stack-based buffer overflow vulnerability exists in the httpd do wds functionality. A specially crafted network request can lead to stack-based buffer overflow, allowing an attacker to send a...

Juniper Junos OS Multiple Vulnerabilities (JSA73160)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA73160 advisory. - An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine pfe of Juniper Networks Junos OS Evolved on PTX10003 Series allows an...

CVE-2023-33301

An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource from a non trusted host...

USN-6424-1 ruby-kramdown vulnerability

It was discovered that kramdown did not restrict Rouge formatters to the correct namespace. An attacker could use this issue to cause kramdown to execute arbitrary code...

PT-2023-32133 · Byzoro · Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description: A critical issue affects some unknown functionality of the file /log/download.php, where the manipulation of the file argument...

PT-2023-20548 · Tibco · Tibco Spotfire Analyst +1

Name of the Vulnerable Software and Affected Versions: TIBCO Spotfire Analyst versions 11.4.7 and below, 11.5.0, 11.6.0, 11.7.0, 11.8.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.1.1 TIBCO Spotfire Server versions 11.4.11 and below, 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.7.0, 11.8.0,...

The vulnerability of the WS_FTP Server server, related to incorrect path name restrictions for the restricted access directory, allows attackers to circumvent security restrictions, gain unauthorized read, modify, or delete access to data, and execute arbitrary commands.

The vulnerability of the WSFTP Server server is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows an attacker to bypass security restrictions, gain unauthorized read, edit, or delete access to data, and execute arbitrary commands...

PT-2023-6022 · Fortinet · Fortiguest

Name of the Vulnerable Software and Affected Versions: Fortinet FortiGuest version 1.0.0 Description: The issue is related to an insertion of sensitive information into log files, which allows a local attacker to access plaintext passwords in the RADIUS logs. This is due to insufficient protectio...

PT-2023-32138 · Unknown · Shenzhen Reachfar

Name of the Vulnerable Software and Affected Versions: Shenzhen Reachfar version v28 Description: The issue allows a remote attacker to retrieve all the week's logs stored in the 'log2' directory, potentially exposing sensitive information such as remembered wifi networks, sent messages, SOS devi...

Policy Enforcement Bypass

chromium is vulnerable to .The vulnerability arises from insufficient policy enforcement in the Downloads component of the library, enabling an attacker to bypass enterprise policy restrictions through a crafted download...

CVE-2023-5103

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe...

CVE-2023-5103

The CVE-2023-5103 issue affects SICK APU’s RDT400, where improper restriction of rendered UI layers or frames can allow an unprivileged remote attacker to disclose sensitive information by tricking a user into clicking an actionable item in an iframe. Documents consistently identify the affected ...

CVE-2023-43699

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited...

CVE-2023-43699

CVE-2023-43699 affects the SICK APU RDT400 (SICK Application Processing Unit). The vulnerability is an improper restriction of excessive authentication attempts, allowing an unprivileged remote attacker to guess passwords via trial-and-error because login attempts are not limited. Documents confi...

PT-2024-13254 · Fortinet · Forticlientmac

Name of the Vulnerable Software and Affected Versions: FortiClientMac versions 7.2.3 and below FortiClientMac version 7.0.10 and below installer Description: The issue allows a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting...