PT-2023-18933 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a file writing vulnerability. Successful exploitation of this vulnerability could cause information disclosure. Recommendations: At the moment, there is no...

PT-2023-35669 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello function, specifically in the process tls and fuz...

CVE-2023-50778

A cross-site request forgery CSRF vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified token...

PT-2023-36300 · Suse · Container-Suseconnect

Name of the Vulnerable Software and Affected Versions: container-suseconnect affected versions not specified Description: The issue is related to a security release in the go 1.21 package. The container-suseconnect package has been rebuilt with this security release to address the issue. There is...

PT-2023-36082 · Repox · Repox

Name of the Vulnerable Software and Affected Versions: Repox affected versions not specified Description: A path traversal issue has been detected, allowing an attacker to read arbitrary files on the server. This could lead to the disclosure of sensitive information, including application code,...

PT-2023-29108 · Unknown · Designed For Reliability (Dfr) Module

Name of the Vulnerable Software and Affected Versions: Designed for Reliability DFR module affected versions not specified Description: The issue concerns a missing permission verification for APIs in the Designed for Reliability DFR module. Successful exploitation of this issue may affect servic...

PT-2023-15803 · Wifi · Wifi

Name of the Vulnerable Software and Affected Versions: Wifi service affected versions not specified Description: The issue is related to a possible out of bounds write in the wifi service due to a missing bounds check. This could lead to a local denial of service, and no additional execution...

PT-2023-28529 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, which could allow writing permission usage records of an app. This may lead to local information...

PT-2023-28534 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue concerns a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges. This could...

PT-2023-28566 · Sysui · Sysui

Name of the Vulnerable Software and Affected Versions: sysui affected versions not specified Description: The issue is related to a possible missing permission check in sysui. This could lead to local denial of service with no additional execution privileges needed. Recommendations: At the moment...

CVE-2023-49673

A cross-site request forgery CSRF vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password...

PT-2023-35618 · Git +1 · Libxaac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 4. The crash state involves several functions, including iaace estimate sc...

PT-2023-35615 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5O shared decode and H5O dtype shared decode functions, as well as the H5O msg read oh...

PT-2023-27821 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk affected versions not specified Description: The issue allows Autodesk users who no longer have an active license for an account to still access cases for that account. Recommendations: At the moment, there is no information about a...

PT-2023-7189 · Microsoft · Sapi +1

Name of the Vulnerable Software and Affected Versions: Microsoft Speech Application Programming Interface SAPI affected versions not specified Description: The issue is related to insufficient access restrictions in the Speech API SAPI of Windows operating systems. It allows an attacker to elevat...

PT-2023-7107 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, where the...

PT-2023-7085 · Ashlar Vellum · Ashlar-Vellum Argon

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Argon affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required, as the target must visit a malicious...

PT-2023-31538 · Camera · Camera

Name of the Vulnerable Software and Affected Versions: Camera affected versions not specified Description: A flaw has been discovered that allows for authenticated command injection on the camera. An attacker could inject malicious data into request packets to execute commands. Recommendations: A...

libtiff: tiffcrop: null pointer dereference in TIFFClose()

A flaw was found in LibTiff. A NULL pointer dereference in TIFFClose is caused by a failure to open an output file non-existent path or a path that requires permissions like /dev/null while specifying zones...

PT-2023-19827 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core due to secure memory access by a user while loading a modem image. Recommendations: At the moment, there is no information about a newer versi...