PT-2023-4597 · Vmware · Vmware Aria Operations For Networks

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Networks versions 6.0 through 6.10 Description: The issue is related to an authentication bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria...

Moxa ioLogik 4000 Series Improper Restriction of UI (CVE-2023-4229)

A vulnerability has been identified in ioLogik 4000 Series ioLogik E4200 firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized dat...

PT-2023-27034

Name of the Vulnerable Software and Affected Versions AOMedia versions 3.0.0 through 3.5.0 Description The issue is related to an invalid read memory access via the component assign frame buffer p in av1/common/av1 common int.h. This component is part of the AOMedia library. Recommendations For...

The vulnerability of the module module.constructor.createRequire() in the Node.js software platform allows a hacker to circumvent established security restrictions.

The vulnerability of the module module.constructor.createRequire in the Node.js software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent established security restrictions remotely...

PT-2023-28010 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.2.0a Description: A local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command. Recommendations:...

The vulnerability of ScrutisWeb banknote monitoring software arises from an incorrect path limitation for the access to the restricted directory. This allows a hacker to gain direct access to any file outside of the root directory.

The vulnerability of ScrutisWeb banknote monitoring software exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain direct access to any file outside of the root directory...

CVE-2022-43904

IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895...

Design/Logic Flaw

IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895...

PT-2023-27627 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...

PT-2023-27080 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name, Address, and Company parameters under the Add Member...

PT-2023-27656 · Pf4J +1 · Pf4J +1

Name of the Vulnerable Software and Affected Versions: pf4j versions 3.9.0 and earlier Description: An issue in pf4j allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter. Recommendations: For pf4j versions 3.9.0 and earlier, consider...

The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software allows a hacker to create or overwrite critical files and execute arbitrary code.

The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software lies in the incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows an attacker to create or overwrite critical files remotely, and execute arbitrary code...

PT-2023-4666 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue affects FreeRDP clients only and is related to an integer underflow leading to a Denial of Service DOS vulnerability. When an insufficient blockLen ...

PT-2023-27022 · Ectouch · Ectouch

Name of the Vulnerable Software and Affected Versions: ECTouch version 2 Description: The issue is a SQL injection vulnerability. It occurs via the id parameter at the defaulthelpersinsert.php location. This allows for potential exploitation by injecting malicious SQL code. Recommendations: For...

PT-2023-6904 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.4 Description: The issue is related to SQL injection, where a remote attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. This is due to th...

PT-2023-29578 · Unknown · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Inventory Management System. The issue affects an unknown functionality of the file staff data.php. The manipulation ...

PT-2023-27697 · Tenda · Tenda Ax3

Name of the Vulnerable Software and Affected Versions: Tenda AX3 version 16.03.12.11 Description: The issue is a stack buffer overflow that allows attackers to cause a Denial of Service DoS via the ssid parameter. This occurs at the form fast setting wifi set function. Recommendations: For Tenda...

PT-2023-26872 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through R19.3 SP3 22.24.5800.0 Description: A vulnerability in the Edge Gateway component could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to imprope...

PT-2023-5246

Name of the Vulnerable Software and Affected Versions giflib version 5.2.1 Description The issue is related to a segmentation fault in the getarg.c component of the giflib library, which can be exploited to cause a denial of service. Recommendations For giflib version 5.2.1, consider updating to ...

Medium: golang

Issue Overview: 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192...