Design/Logic Flaw

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

PT-2023-20376 · Intel · Intel(R) Vcust Tool

Name of the Vulnerable Software and Affected Versions: IntelR VCUST Tool versions prior to those downloaded on February 3rd, 2023 Description: The issue is related to an uncontrolled search path element in the IntelR VCUST Tool software. This may allow an authenticated user to potentially enable...

PT-2023-14609 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 8.0.0.4035 Description: The issue is related to improper access control in IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-27168 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.1 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.6 Description: The issue is related to a heap overflow that can be trigger...

PT-2023-4903 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.1 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.6 Description: The issue is caused by a heap overflow in the dynamic memor...

SUSE-SU-2023:3266-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow bsc1213128...

SUSE-SU-2023:3263-1 Security update for go1.19

This update for go1.19 fixes the following issues: - Update to go v1.19.12 released 2023-08-01 bsc1200441 - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. bsc1213880...

PT-2023-22900 · Unknown +1 · Semwifiaptimeoutimpl +1

Name of the Vulnerable Software and Affected Versions: framework versions prior to SMR Aug-2023 Release 1 Description: The issue allows local attackers to access ContentProvider without proper permission due to a PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl. Recommendations: For...

PT-2023-22885 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is an out-of-bounds write in the RmtUimApdu of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations: For versions prior to SMR Aug-2023...

PT-2023-22895 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is caused by improper input validation in the IpcTxGetVerifyAkey function, allowing an attacker to cause an out-of-bounds write. Recommendations: For versions prior to...

PT-2023-12970 · Intel · Intel Dtt

Name of the Vulnerable Software and Affected Versions: Intel DTT Software versions prior to 8.7.10400.15482 Description: The issue is related to improper access control in the Intel DTT Software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-12990 · Intel · Intel Manageability Commander

Name of the Vulnerable Software and Affected Versions: IntelR Manageability Commander versions prior to 2.3 Description: The issue is related to Cross-site Scripting XSS that may allow an unauthenticated user to potentially enable escalation of privilege via network access. Recommendations: For...

PT-2025-1449 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing CO files, which could lead to a heap-based buffer overflow. An attacker could...

PT-2023-27171 · User Oidc +1 · User Oidc +1

Name of the Vulnerable Software and Affected Versions: user oidc versions 1.0.0 through 1.3.2 Description: The issue affects the user oidc module, which provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. An attacker with at least read access to a snapshot of the...

PT-2023-21186 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 23.1.9 Description: The issue is related to cross-site scripting XSS and may allow an unauthenticated user to potentially enable escalation of privilege via network access. Recommendations: For versions...

PT-2023-22879 · Unknown · Hal Vaultkeeper

Name of the Vulnerable Software and Affected Versions: HAL VaultKeeper versions prior to SMR Aug-2023 Release 1 Description: The issue is related to an improper input validation vulnerability within the initialize function. This vulnerability allows an attacker to cause an out-of-bounds write...

PT-2023-20280 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: IntelR UnisonTM versions prior to 10.12 Description: The issue is related to improper access control in IntelR UnisonTM software, which may allow a privileged user to potentially enable escalation of privilege via network access...

PT-2023-24350 · Kramerav · Kramerav Via Connect +1

Name of the Vulnerable Software and Affected Versions: KramerAV VIA Connect 2 versions prior to 4.0.1.1326 KramerAV VIA Go 2 versions prior to 4.0.1.1326 Description: The issue allows for local code execution at the root level when the screen is visible and remote mouse connection is enabled. Thi...