Intel® SDP Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Server Debug and Provisioning SDP Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31246 Description: Incorrect default...

PT-2023-4772 · Unknown · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.4 Description: A vulnerability has been identified that allows authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges. The issue is related to the...

PT-2023-21110 · Unknown · Everest News

Name of the Vulnerable Software and Affected Versions: Everest News theme versions prior to 1.1.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into a website using the Evere...

PT-2023-26583 · Unknown · Special Interest Group Network For Analysis/Liaison

Name of the Vulnerable Software and Affected Versions: Special Interest Group Network for Analysis and Liaison versions 4.4.0 through 4.7.7 Description: The issue allows authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the...

Intel Unite® Android App Advisory

Summary: Potential security vulnerabilities in the Intel Unite® android application may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32609 Description: Improper access control in the Intel...

Intel® Unite® Software Advisory

Summary: Potential security vulnerabilities in some Intel® Unite® software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25773 Description: Improper access control in the IntelR UniteR Hub...

PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux Description: The issue is related to an uncontrolled search path...

JVN#42527152: "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly

"FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat, the...

PT-2023-28146 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application takes user input and sends it back to the user...

PT-2023-24629 · WordPress · David Lingren Media Library Assistant

Name of the Vulnerable Software and Affected Versions: David Lingren Media Library Assistant plugin versions = 3.0.7 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability in a submodule of the David Lingren Media Library Assistant plugin. This...

PT-2023-6026 · Apple +6 · Macos Sonoma +10

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14 Description: A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrar...

DLA-3515-1 cjose - security update

Bulletin has no description...

PT-2023-26556 · Unknown · Matrix-Appservice-Bridge

Name of the Vulnerable Software and Affected Versions: matrix-appservice-bridge versions 4.0.0 through 8.1.1 matrix-appservice-bridge versions 9.0.0 Description: A malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the...

SUSE-SU-2023:3181-1 Security update for go1.20

This update for go1.20 fixes the following issues: - Update to go v1.20.7 released 2023-08-01 bsc1206346 - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. bsc1213880...

Design/Logic Flaw

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016...

Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile EPMM, prompting Ivanti to urge users to update to the latest version of the software. Tracked as CVE-2023-35082 CVSS score: 10.0 and discover...

PT-2023-5956 · Php +11 · Php +11

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. through 8.0.29 PHP versions 8.1. through 8.1.21 PHP versions 8.2. through 8.2.7 Description: The issue is related to the way PHP's XML functions rely on libxml global state to track configuration variables. This state can be...

PT-2023-24313 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.9.1 Description: A path traversal issue exists, allowing unauthenticated attackers to fetch arbitrary files from the server's web server. Recommendations: For Suprema BioStar 2 versions prior to 2.9.1,...

PT-2023-4152 · Mitsubishi · Gt Softgot2000 +3

Name of the Vulnerable Software and Affected Versions: GT Designer3 versions affected versions not specified GOT2000 Series versions affected versions not specified GOT SIMPLE Series versions affected versions not specified GT SoftGOT2000 versions affected versions not specified Description: The...

PT-2023-24311 · Suprema · Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.9.1 Description: An authentication bypass issue exists, allowing unauthenticated users to access some functionality on BioStar 2 servers. Recommendations: For Suprema BioStar 2 versions prior to 2.9.1,...