PT-2023-14001 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows versions prior to 1.9.0 Description: The issue is related to improper access control in IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enable information disclosure via loca...

PT-2023-18406 · Intel · Intel Server Board Bmc Firmware

Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: The issue allows a privileged user to enable escalation of privilege via local access due to access of memory location after end of buffer in the firmware. Recommendations:...

PT-2023-14016 · Intel · Intel Quartus Prime Pro

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro edition software versions prior to 22.3 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2023-19294 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector software versions prior to 2021.8.0 Description: The issue is related to an out-of-bounds read that may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-14015 · Intel · Intel Retail Edge Mobile Ios

Name of the Vulnerable Software and Affected Versions: IntelR Retail Edge Mobile iOS application versions prior to 3.4.7 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-14059 · Intel · Intel Dcm

Name of the Vulnerable Software and Affected Versions: IntelR DCM software versions prior to 5.1 Description: The issue is related to an uncontrolled search path in the IntelR DCM software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Node.js: Regular Expression Denial of Service in Headers fetch API

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the Headers.set and Headers.append methods are vulnerable to Regular Expression Denial of Service ReDoS attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normali...

PT-2025-25912 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.0-1086-azure 9118.04.1-Ubuntu Description: The issue is related to the storvsc error wq workqueue in the Linux kernel, which was incorrectly marked as WQ MEM RECLAIM. This marking may cause a deadlock while...

PT-2025-25955 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc4 Description: The issue arises when the USB sleep clocks are disabled, and the clock framework attempts to disable the sleep clock source as well. However, this source cannot be disabled, resulting in ...

PT-2023-22946 · Sap · Sap Crm +1

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI versions S4FND 102 through S4FND 107, WEBCUIF 700 through WEBCUIF 801 Description: The issue arises from insufficient encoding of user-controlled inputs, leading to a stored Cross-Site Scripting XSS vulnerability. An...

PT-2023-7428 · Intel · Intel Nuc P14E Laptop Element

Name of the Vulnerable Software and Affected Versions: Intel NUC P14E Laptop Element software versions prior to 1.0.0.156 Description: The issue is related to incorrectly used default permissions in the Audio Service of the Intel NUC P14E Laptop Element software. This could allow an authenticated...

PT-2025-25214

Name of the Vulnerable Software and Affected Versions Perl CryptX versions prior to 0.087 Description The issue is related to an integer overflow associated with a dependency in the libtommath library embedded in Perl CryptX. This library is susceptible to an integer overflow. Recommendations For...

PT-2023-12131 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.16 Description: The issue allows remote attackers to execute arbitrary commands. This is achieved via the m1 sortby parameter to the "modules/News/function.admin articlestab.php" endpoint. Recommendations...

PT-2023-19569 · Ecwid · Ecwid Ecommerce Shopping Cart

Name of the Vulnerable Software and Affected Versions: Ecwid Ecommerce Shopping Cart plugin versions = 6.11.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with contributor or higher permissions...

PT-2023-17146 · WordPress · Ai Chatbot

Name of the Vulnerable Software and Affected Versions: AI ChatBot WordPress plugin versions prior to 4.4.7 Description: The issue allows unauthenticated users to perform PHP Object Injection via an AJAX action, potentially exploiting the presence of a suitable gadget on the blog. This is achieved...

PT-2023-19112 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP plugin versions = 2.25.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with contributor or higher permissions. Recommendations: For...

PT-2023-22597 · Cyberghost · Cyberghostvpn Windows Client

Name of the Vulnerable Software and Affected Versions: CyberGhostVPN Windows Client versions prior to 8.3.10.10015 Description: A DLL injection issue was found in the Dashboard.exe component of the CyberGhostVPN Windows Client. Recommendations: For versions prior to 8.3.10.10015, update to versio...

PT-2023-23122 · Unknown · Opc Ua .Net Standard Reference Server

Name of the Vulnerable Software and Affected Versions: OPC UA .NET Standard Reference Server versions prior to 1.4.371.86 Description: The issue allows remote attackers to send malicious requests that expose sensitive information by placing it into an error message. This error message may be seen...

PT-2023-20140 · Unilogies · Bumsys

Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.2.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application receives input from a user and stores it, allowing an attacker to inject malicious scripts. This...

PT-2023-20424 · WordPress · Denzel Chia | Phire Design Custom Login Page

Name of the Vulnerable Software and Affected Versions: Denzel Chia | Phire Design Custom Login Page plugin versions = 2.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Denzel Chia |...