Medium: bouncycastle

Issue Overview: A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious...

PT-2023-6277

Name of the Vulnerable Software and Affected Versions WireGuard client version 0.5.3 Description The issue is related to errors in handling links, allowing a remote attacker to block IP traffic to selected IP addresses. This can be exploited to trick the victim into blocking IP traffic to chosen ...

CVE-2023-39342 Dangerzone CLI does not sanitize ANSI escape characters

Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI dangerzone-cli command logs output from the container where the file sanitization takes place, to the user's terminal. Prior to version 0.4.2, if the container is...

SUSE-SU-2023:3236-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. bsc1213128 - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow remote code execution vulnerability. bsc1213131...

Description of the security update for Visio 2016: March 12, 2024 (KB5002565)

None None...

PT-2023-5484 · Phoenix Contact · Tc Cloud Client +2

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT TC ROUTER versions prior to 2.07.2 PHOENIX CONTACT TC CLOUD CLIENT versions prior to 2.07.2 PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX versions prior to 2.06.10 Description: The issue is related to the incorrect restriction of X...

PT-2023-19570 · I Thirteen Web Solution · Wp Responsive Tabs

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugin versions prior to 1.1.15 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker ca...

PT-2023-21100 · Everest Themes · Mocho Blog Theme

Name of the Vulnerable Software and Affected Versions: Everest themes Mocho Blog theme versions 1.0.4 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-21111 · Nsthemes · Nsthemes Ns Coupon To Become Customer

Name of the Vulnerable Software and Affected Versions: NsThemes NS Coupon To Become Customer plugin versions prior to 1.2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior...

Intel® Quartus® for Linux Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00800.html...

Intel® RST Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Rapid Storage Technology RST software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-43456 Description: Uncontrolled search path in...

Intel® VCUST Tool Advisory

Summary: A potential security vulnerability in some Intel® VCUST Tool software may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-25944 Description: Uncontrolled search path element in some Intel...

Intel® VROC Software Advisory

Summary: A potential security vulnerability in some Intel® Virtual RAID on CPU VROC software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-45112 Description: Improper access control in some...

PT-2023-4400 · Intel · Intel Onevpl Gpu

Name of the Vulnerable Software and Affected Versions: Intel oneVPL GPU versions prior to 22.6.5 Description: The issue is related to an out-of-bounds read in the Intel oneVPL GPU software, which can potentially allow an authenticated user to enable information disclosure via local access. This i...

Intel® RealSenseTM SDK Advisory

Summary: A potential security vulnerability in some Intel® RealSense™ Software Development Kits SDKs may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32663 Description: Incorrect default...

PT-2023-4639 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to a Use After Free vulnerability that could result i...

PT-2023-26990 · Unknown · Social Media Skeleton

Name of the Vulnerable Software and Affected Versions: social-media-skeleton versions 1.0.0 through 1.0.3 Description: The issue is a stored cross-site scripting vulnerability in an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Recommendations: For...

PT-2023-4772 · Unknown · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.4 Description: A vulnerability has been identified that allows authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges. The issue is related to the...

PT-2023-19240 · Pierre Jehan · Owl Carousel

Name of the Vulnerable Software and Affected Versions: Pierre JEHAN Owl Carousel plugin versions = 0.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Pierre JEHAN Owl Carousel plugin...

PT-2023-4395 · Intel · Intel Onevpl Gpu

Name of the Vulnerable Software and Affected Versions: IntelR oneVPL GPU software versions prior to 22.6.5 Description: The issue is related to improper neutralization in the software, which may allow an authenticated user to potentially enable denial of service via local access. This could be...