PT-2023-5162 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

PT-2023-5160 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

PT-2023-5491 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 117.0.5938.62 Description: The issue is related to an inappropriate implementation in Interstitials, allowing a remote attacker to obfuscate security UI via a crafted HTML page. This could enable the attacker t...

PT-2023-27041 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...

PT-2023-5163 · Siemens · Tecnomatix Plant Simulation +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V14.3.0.1 Teamcenter Visualization V13.3 versions prior to V13.3.0.12 Teamcenter Visualization V14.0 all versions Teamcenter Visualization V14.1 versions prior to V14.1.0.11 Teamcenter Visualization V14.2 versions prio...

PT-2023-9490 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the erofs component of the Linux kernel, specifically with the LZMA global compressed deduplication feature enabled. When stressing microLZMA...

The vulnerability of the Eclipse Jersey framework, related to the creation of temporary files with insecure permissions, allows a perpetrator to disclose protected information.

The vulnerability of the Eclipse Jersey framework lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to disclose protected information...

Oracle Linux 7 : keepalived (ELSA-2019-2285)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2285 advisory. 1.3.5-16 - Rework previous miscscript/vrrpscript patch 1667292 1.3.5-15 - Rework previous checker comparison patch 1715308 1.3.5-14 - Make checker variables non...

Oracle Linux 7 : keycloak-httpd-client-install (ELSA-2019-2137)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2137 advisory. 0.8-1 - Resolves: rhbz1673716 - Rebase k-h-c-i to version 0.8 - The rebase also includes fixes for: - rhbz1533190 - CVE-2017-15111...

CVE-2023-32432

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data...

CVE-2023-32432

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data...

Code injection

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data...

CVE-2023-32432

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data...

CVE-2023-32432

CVE-2023-32432 affects Apple platforms (macOS Ventura 13.4; tvOS 16.5; iOS 16.5; iPadOS 16.5; watchOS 9.5). Description: a privacy issue was addressed by improving handling of temporary files, reducing the risk that an app could access user-sensitive data. Affected component/area is how temporary...

SolarView Compact 6.00 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SolarView Compact unauthenticated remote command execution vulnerability.', 'Description' = %q CONTEC's SolarView™ Series enables you to monitor...

Locally cached profiles not getting deleted at User logoff from the VDA

Locally cached user profiles does not get deleted at user logoff. User gets a temp profile at next consecutive login...

PT-2023-25084 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An improper resource allocation issue exists in the OAS Engine configuration management functionality. A specially crafted series of network requests can lead to the creati...

PT-2023-23692 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An information disclosure issue exists in the OAS Engine configuration management functionality. A specially crafted series of network requests can lead to a disclosure of...

The vulnerability of the XWiki platform lies in its incomplete cleanup of temporary or auxiliary resources, allowing attackers to increase their privileges.

The vulnerability of the XWiki platform lies in the incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2025-10402

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11., 11.0 through 11.0. Description The issue may cause MariaDB Server to crash with an empty backtrace log. This could be related to the make aggr tables info and optimize stage2 functions...