PT-2023-18211 · Samsung · Samsung Flow For Pc

Name of the Vulnerable Software and Affected Versions: Samsung Flow for PC version 4.9.14.0 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For Samsung Flow for PC version...

PT-2023-6770 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2023.6 Description: The issue is related to a heap-based buffer overflow in the DXF file reading procedure. This occurs due to the lack of proper validation of the length of user-supplied...

PT-2023-18199 · Samsung · Bixby Vision

Name of the Vulnerable Software and Affected Versions: Bixby Vision versions prior to 3.7.70.17 Description: The issue is related to improper input validation, which allows an attacker to access Bixby Vision data. Recommendations: For versions prior to 3.7.70.17, update to version 3.7.70.17 or...

PT-2023-18194 · Nfctile · Nfctile

Name of the Vulnerable Software and Affected Versions: NfcTile versions prior to SMR Jan-2023 Release 1 Description: The issue is related to improper access control, allowing an attacker to use NFC without user recognition. Recommendations: For versions prior to SMR Jan-2023 Release 1, update to...

PT-2023-18210 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow for Android versions prior to 4.9.04 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For versions prior...

PT-2023-19940 · Nextcloud · Nextcloud Office

Name of the Vulnerable Software and Affected Versions: Nextcloud Office versions prior to 7.0.2 Nextcloud Office versions prior to 6.3.2 Nextcloud Office versions prior to 5.0.10 Nextcloud Office versions prior to 4.2.9 Nextcloud Office versions prior to 3.8.7 Description: The Collabora integrati...

PT-2023-1845 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to incorrect checking of the return value of a method or function in the Tbase database server of the B&R APROL software solution for monitoring industrial systems. This c...

PT-2023-14599 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to an Improper Input Validation vulnerability that allows SQL Injection in Smartpower Web. This vulnerability can be exploited due to the lack of proper validation of...

MGASA-2023-0035 Updated nodejs-minimist packages fix security vulnerability

Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906...

J-BusinessDirectory, 5.7.7 and prior, Other

In the J-BusinessDirectory version 5.8.3 we have updated guzzlehttp to the latest version, 7.5.0 and to PSR 2.1.5...

SUSE-SU-2023:0275-1 Security update for rubygem-activesupport-5_1

This update for rubygem-activesupport-51 fixes the following issues: - CVE-2023-22796: Fixed a potential denial of service when passing a crafted input to the underscore method due to an inefficient regular expression bsc1207454...

PT-2023-12911 · Aa Team · Aa-Team Wzone – Lite Version

Name of the Vulnerable Software and Affected Versions: AA-Team WZone – Lite Version plugin version 3.1 Lite Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

PT-2023-12969 · Afterpay · Afterpay Gateway For Woocommerce

Name of the Vulnerable Software and Affected Versions: Afterpay Gateway for WooCommerce versions prior to 3.5.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...

PT-2023-19306 · Unknown +2 · Opensearch +2

Name of the Vulnerable Software and Affected Versions: OpenSearch versions prior to 1.3.8 OpenSearch versions prior to 2.6.0 Description: There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detector role can...

PT-2023-16419 · Squidex · Squidex

Name of the Vulnerable Software and Affected Versions: squidex/squidex versions prior to 7.4.0 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository squidex/squidex. This is a type of attack where an attacker tricks a user into performing unintended actions...

PT-2023-15070 · Unknown · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk plugin versions = 2.7.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

PT-2023-18453 · F5 · Big-Ip Edge Client

Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client versions 7.2.2 through 7.2.3.1 Description: A DLL hijacking issue exists in the BIG-IP Edge Client Windows Installer. This affects versions of the software starting from 7.2.2 up to but not including 7.2.3.1. Note that...

PT-2023-18429 · Bip-Ip · Bip-Ip

Name of the Vulnerable Software and Affected Versions: BIP-IP versions 13.1.x BIP-IP versions 14.1.x before 14.1.5.3 BIP-IP versions 15.1.x before 15.1.8.1 BIP-IP versions 16.1.x before 16.1.3.3 BIP-IP versions 17.0.x before 17.0.0.2 Description: When an OCSP authentication profile is configured ...

PT-2023-1424 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2020 Update 4 and earlier, 2022 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation requires use...

PT-2023-7354 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.5.2 BIG-IP versions 15.1.x through 15.1.8.0 BIG-IP versions 16.1.x through 16.1.3.2 Description: The issue is related to a buffer overflow in memory, which can be exploited by a remot...