PT-2024-13323 · Minizinc · Minizinc

Name of the Vulnerable Software and Affected Versions: MiniZinc affected versions not specified Description: The issue is related to a null pointer dereference in MiniZinc, which can be triggered via a crafted Preferences.json file. Recommendations: At the moment, there is no information about a...

PT-2024-13672 · Discourse · Discourse-Reactions

Name of the Vulnerable Software and Affected Versions: Discourse-reactions plugin affected versions not specified Description: The Discourse-reactions plugin allows users to add reactions to posts. However, it has an issue where data about a user's reaction notifications could be exposed...

CVE-2024-0358

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

PT-2023-18945 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak, where successful exploitation could cause the leak of information. There is no information provided about the estimated number of...

PT-2023-35655 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Java affected versions not specified Description: The issue is related to a security exception in Java. It involves the java.base/java.lang.reflect.Array.newArray and java.base/java.lang.reflect.Array.newInstance functions, as well as the...

PT-2023-35636 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state includes functions such as ih264d...

PT-2023-35635 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in the BinaryRC4Decryptor component of Apache POI, specifically in the initCipherForBlock function. This issue is related to the BinaryRC4CipherInputStre clas...

PT-2023-28519 · Unknown · Omacp Service

Name of the Vulnerable Software and Affected Versions: omacp service affected versions not specified Description: The issue is related to a missing permission check in the omacp service, which could allow writing permission usage records of an app. This may lead to local information disclosure...

PT-2023-29691 · Google · Android

Name of the Vulnerable Software and Affected Versions: The affected software and versions are not specified. Description: The issue is related to a possible out of bounds read in the parse gap data function due to a missing bounds check. This could lead to local information disclosure, requiring...

PT-2023-12332 · Unknown · Apm Java Agent

Name of the Vulnerable Software and Affected Versions: APM Java agent affected versions not specified Description: A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. By usin...

PT-2023-8229 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: The issue in the FFmpeg multimedia library is related to insufficient access control. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment, there is no...

PT-2023-6588 · Sielco · Sielco Polyeco1000

Name of the Vulnerable Software and Affected Versions: Sielco PolyEco1000 affected versions not specified Description: The issue is related to inadequate access control in the Sielco PolyEco1000 digital fm-transmitter's software. An attacker can exploit this by modifying passwords in POST request...

PT-2023-36009 · Libvp9 · Libvp9

Name of the Vulnerable Software and Affected Versions: libvp9 affected versions not specified Description: The issue is related to a heap-buffer-overflow read in the libvp9 library. The crash occurs in the Video::VP9::Decoder module, specifically in the create video frame, decode frame, and recei...

PT-2023-35955 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the IEC104Stats::processPacket function, which is calle...

PT-2023-26908 · Unknown · Audio Module

Name of the Vulnerable Software and Affected Versions: Audio module affected versions not specified Description: The issue is related to a permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...

PT-2023-26323 · Microsoft · Azure Arc-Enabled Servers

Name of the Vulnerable Software and Affected Versions: Azure Arc-Enabled Servers affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2023-21802 · Unknown · Media Codec

Name of the Vulnerable Software and Affected Versions: Media codec affected versions not specified Description: The issue is related to a transient Denial of Service DOS in audio while remapping the channel buffer in media codec decoding. No information is provided about the estimated number of...

PT-2023-15847 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: SystemUI affected versions not specified Description: The issue concerns an unauthorized access vulnerability in the SystemUI module, which may impact confidentiality upon successful exploitation. Recommendations: At the moment, there is no...

PT-2023-15817 · Unknown · Secure Os Module

Name of the Vulnerable Software and Affected Versions: Secure OS module affected versions not specified Description: The issue is related to configuration defects in the secure OS module. Successful exploitation of this defect will affect availability. Recommendations: At the moment, there is no...

PT-2023-15827 · Unknown · Secure Os Module

Name of the Vulnerable Software and Affected Versions: Secure OS module affected versions not specified Description: The issue is related to configuration defects in the secure OS module. Successful exploitation of this defect will impact availability. Recommendations: At the moment, there is no...