PT-2023-1551 · Unknown +2 · Html-Stripscripts +2

Name of the Vulnerable Software and Affected Versions: HTML-StripScripts versions 1.06 and earlier Description: The issue is related to the hss attval style function in the HTML-StripScripts module, which allows ReDoS Regular expression Denial of Service due to catastrophic backtracking when...

PT-2023-9883 · Ruby · Jruby-Openssl

Name of the Vulnerable Software and Affected Versions: jruby-openssl gem versions prior to 0.6 Description: A security issue was found in the handling of SSL certificate validation, where failed verification did not properly alert the application, making it vulnerable to attacks. This could allow...

PT-2023-14799 · Opentext · Opentext Content Suite Platform

Name of the Vulnerable Software and Affected Versions: OpenText Content Suite Platform version 16.2.19.1803 Description: An issue was discovered that allows a low-privilege user to evaluate web reports through the "notify.localizeEmailTemplate" endpoint. Recommendations: For OpenText Content Suit...

PT-2023-14797 · Opentext · Opentext Content Suite Platform

Name of the Vulnerable Software and Affected Versions: OpenText Content Suite Platform version 16.2.19.1803 Description: An issue was discovered that allows a low-privilege user to delete arbitrary files on the server's local filesystem through the "itemtemplate.createtemplate2" endpoint...

PT-2023-13403 · Dell · Idrac8

Name of the Vulnerable Software and Affected Versions: Dell iDRAC8 versions 2.83.83.83 and prior Description: The issue is related to an improper input validation in Racadm when the firmware lock-down configuration is set, allowing a remote high privileged attacker to bypass this configuration an...

PT-2023-33266 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a possible use-after-free UAF condition in the ibmpex register bmc function. This condition may occur when the function fails. The actual impact and attack...

PT-2023-33488 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: A refcount leak was discovered in the xgmiitorgmii probe function. The issue was introduced in version v4.19 and is fixed in Linux Kernel version v6.0.19. The actual impact and attack...

PT-2023-33145 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.15...

PT-2023-33918 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a memory leak in the pnp alloc dev function. It was introduced in version v2.6.30 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet...

PT-2023-33209 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.82 Description: A potential memory leak was identified in the otx2 init tc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.1...

PT-2023-33428 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to a potential use-after-free in the hisi femac rx function. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibilit...

PT-2023-33746 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential memory leak issue was identified in the tifm 7xx1 switch media function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For...

PT-2023-33103 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an out of bounds read in the mvneta config rss function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.5 and fix...

PT-2023-33554 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a use-after-free UAF bug in the destroy function. It was introduced in version v3.9 and fixed in version v6.0.18. The actual impact and attack plausibility have not y...

PT-2023-33441 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: A NULL pointer dereference issue exists in the nilfs palloc commit free entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-16047 · Nlnet · Nlnet Labs Krill

Name of the Vulnerable Software and Affected Versions: NLnet Labs Krill versions prior to 0.12.1 Description: The issue arises when a direct query is made for any existing directory under the "/rrdp/" endpoint, rather than an RRDP file, causing the server to crash. If the built-in "/rrdp" endpoin...

PT-2023-33250 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a use-after-free in the tun detach function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.17 and fixed in Linu...

PT-2023-33447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: A potential socket leak was discovered in the p9 socket open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2023-33328 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns a potential out-of-bounds access in the ieee80211 get rate duration function. This could be related to the wifi and mac80211 components. The actual impact and attack...

PT-2023-33102 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a refcount leak in the rockchip gpiolib register function. This problem was introduced in version v5.15 and is fixed in Linux Kernel version v6.0.13. The actual impac...