PT-2023-34443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...

PT-2023-34122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.85 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...

PT-2023-33944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-1268 · Oracle · Oracle Database

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 19c through 21c Description: The issue is related to insufficient input validation in the Oracle Database RDBMS Security component. It allows a low-privileged attacker with Create Session privilege and network access...

PT-2023-34681

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.18 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2023-21827: Undefined Security Weakness

Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle...

PT-2023-34524

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the xprtrdma component, specifically in the rpcrdma req create function, where regbuf data is not properly freed. This problem was introduced in version v5.2 and is...

PT-2023-34485

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2022-39429: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of...

PT-2023-34172 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a possible use-after-free UAF in the snic tgt create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the xprtrdma component, specifically in the rpcrdma req create function, where regbuf data is not properly freed. This problem was introduced in version v5.2 and is...

CVE-2023-21829: Undefined Security Weakness

Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle...

PT-2023-2686

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use-after-free vulnerability was found in the iscsi sw tcp session create function in the drivers/scsi/iscsi tcp.c file of the SCSI sub-component. This flaw is due to incorrect error...

PT-2023-34529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential memory leak issue exists in the configfs create dir function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the create function, by manipulating the @user field. Remediation Upgrade curupira to version 0.1.4 or higher. References - GitHub Commit - GitHub Release...

Apache Superset vulnerable to Cross-site Scripting

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

CVE-2022-43717

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

knative:FuzzChildName: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6476498750275584 Project: knative Fuzzing Engine: libFuzzer Fuzz Target: FuzzChildName Job Type: libfuzzerasanknative Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreat...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a memory leak issue via the GLESCreateTexture function in the SDLrendergles.c file. Remediation Upgrade sdl to version 2.26.0 or higher. References - GitHub Commit - GitHub PR - GitHub Release - RedHat...