PT-2023-23374 · Motorola · Motorola Cx2L Router

Name of the Vulnerable Software and Affected Versions: Motorola CX2L Router version 1.0.1 Description: A command injection issue was discovered, which can be exploited via the system time timezone parameter. Recommendations: For Motorola CX2L Router version 1.0.1, consider restricting access to t...

CVE-2023-28410

Improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41808

Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access...

Buffer overflow

Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41808

Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41808

The CVE CVE-2022-41808 affects the Intel QAT Driver for Linux prior to version 1.7.l.4.12. The vulnerability is described as an improper buffer restriction that could allow an authenticated user to cause a denial of service via local access. Public sources in connected documents confirm affected ...

CVE-2023-28410

Improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Open Redirect

silverstripe/framework is vulnerable to Open Redirect. The vulnerability exists due to the lack of a validated url restriction in the pregmatch parameter of Director.php which allows an attacker to redirect a user to a malicious URL...

PT-2023-14922 · Unknown · Weston Embedded Uc-Ftps

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-FTPs version 1.98.00 Description: An out-of-bounds read issue exists in the PORT command parameter extraction functionality. A specially-crafted set of network packets can lead to denial of service. This occurs when no IP...

PT-2023-20536 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.21 Description: This issue allows for Cross-site Scripting XSS, which can potentially steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users...

PT-2023-13084 · Intel · Intel Nuc 11 Performance Mini Pc +3

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards affected versions not specified IntelR NUC 11 Performance Kit affected versions not specified IntelR NUC 11 Performance Mini PC affected versions not specified IntelR NUC Pro Compute Element affected versions not specified...

PT-2023-14016 · Intel · Intel Quartus Prime Pro

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro edition software versions prior to 22.3 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2023-22650 · Shenzen Tenda Technology · Tenda Ip Camera Cp3

Name of the Vulnerable Software and Affected Versions: Shenzen Tenda Technology IP Camera CP3 version V11.10.00.2211041355 Description: The issue concerns physical access to U-Boot via the UART, where the Wi-Fi password is exposed, and a hardcoded boot password can be used for console access...

Access Restriction Bypass

Oracle ManagedDataAccess is vulnerable to Access Restriction Bypass. The vulnerability exists due to the TCPS protocol stack which allows an attacker with network access to takeover the Oracle Data Provider for .NET...

CVE-2023-31476

An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters the working directory is /www...

PT-2023-11647 · Unknown · Shop Cms Yershop

Name of the Vulnerable Software and Affected Versions: Shop CMS YerShop versions all Description: The issue allows a remote attacker to escalate privileges via the cover id parameter. Recommendations: For all versions, consider restricting access to the cover id parameter to minimize the risk of...

PT-2023-20340 · Esri · Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Portal for ArcGIS versions 10.9.1 and below Description: Changes to user permissions in Portal for ArcGIS are incompletely applied in specific use cases, potentially allowing users to access content they are no longer privileged to access...

Intel® QAT Driver Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers may allow escalation of privilege, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-218...

PT-2023-22945 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue is caused by insufficient input validation, allowing an unauthenticated attacker to redirect users to an untrusted site using a malicious link...

PT-2025-13367 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A use-after-free issue has been identified in the Linux kernel, specifically in the sch taprio component. This issue occurs when a taprio qdisc is installed with an invalid TCA RAT...