PT-2023-34062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.86 Description The issue is related to the drm/amd/display component, specifically with the use of the largest vready offset in pipe group. The actual impact and attack plausibility have not yet been proven...

PT-2023-34645

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a shift-out-of-bounds/overflow in the nilfs sb2 bad offset function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2023-34104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a shift-out-of-bounds/overflow in the nilfs sb2 bad offset function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2023-33570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.17 Description The issue is related to the validation of data run offset in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2023-34023

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to the validation of data run offset in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33622

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the use of the largest vready offset in pipe group in the drm/amd/display component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-18668 · Cakephp · Cakephp

Name of the Vulnerable Software and Affected Versions: CakePHP versions prior to 4.2.12 CakePHP versions prior to 4.3.11 CakePHP versions prior to 4.4.10 Description: The issue concerns SQL injection vulnerability in the CakeDatabaseQuery::limit and CakeDatabaseQuery::offset methods when passed...

CVE-2023-22727: Improper Neutralization of Special Elements used in an SQL Command

CakePHP is a development framework for PHP web apps. In affected versions the Cake\Database\Query::limit and Cake\Database\Query::offset methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to...

CakePHP SQL injection vulnerability

CakePHP is the U.S. CAKE Foundation of a MVC-based architecture , open source Web development framework. The framework has flexible view caching, automatic generation of CRUD code and other features. CakePHP suffers from an SQL injection vulnerability that stems from the CakeDatabaseQuery::limit...

CLSA-2023-1673905718 Fix CVE(s): CVE-2016-5011

SECURITY UPDATE: Extended partition loop in MBR partition table leads to DoS - debian/patches/CVE-2016-5011-1.patch: ignore MBR extended partition at zero offset - debian/patches/CVE-2016-5011-2.patch: avoid non-empty recursion in EBR - CVE-2016-5011...

CVE-2017-16318

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

WS-2023-0002

"DyeColorIdMap-fromId" did not account for the possibility that it might be given invalid input. This means that an undefined offset error would occur whenever this happened. This code is indirectly called during ""Banner-deserializeCompoundTag""...

PT-2023-10609 · Unknown · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

EulerOS Virtualization 3.0.2.6 : vim (EulerOS-SA-2023-1053)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3927, CVE-2021-3984, CVE-2021-4019,...

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE when there is a large length in the zero DataOffset case.

...

UBUNTU-CVE-2022-42264

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss, information disclosure, or denial of service...

PT-2022-26346 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to an unprivileged regular user being able to cause the use of an out-of-range pointer offset in the kernel mode layer, potentially leading ...

CVE-2022-42264: Use of Out-of-range Pointer Offset

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss, information disclosure, or denial of service...

CVE-2020-36630

A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler of the file ucp/Cdr.class.php. The manipulation of the argument limit/offset leads to sql injection. Upgrading to version 14.0.5.21 is able to address this issue. The name of t...

CVE-2020-36630: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in FreePBX cdr 14.0. It has been classified as critical. This affects the function ajaxHandler of the file ucp/Cdr.class.php. The manipulation of the argument limit/offset leads to sql injection. Upgrading to version 14.0.5.21 is able to address this issue. The name of t...