PT-2023-33264 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns error handling in the fm10k init module function. It was introduced in version v3.18 and is fixed in Linux Kernel version v5.15.82. The actual impact and attack...

PT-2023-33175 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33173 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns error handling in the iavf init module function. It was introduced in version v4.6 and fixed in version v6.0.12. The actual impact and attack plausibility have not yet bee...

PT-2023-33210 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a missing INIT LIST HEAD in the ieee802154 if add function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...

PT-2023-14086 · Nvidia · Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: DGX A100 SBIOS affected versions not specified Description: The issue concerns a vulnerability in the Pre-EFI Initialization PEI phase, where a privileged user can disable SPI flash protection. This may lead to denial of service, escalation o...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2024-11812 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to a missing call to ssam request sync free in the platform/surface: aggregator component. Although rare, ss...

Proxy creation isn't check in deployWallet function of SmartAccountFactory contract

Lines of code Vulnerability details The deployWallet function present in the SmartAccountFactory contract deploys a new wallet by creating a Proxy that points to a base implementation using assembly. function deployWalletaddress owner, address entryPoint, address handler public returnsaddress pro...

Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2023-1085)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-9998 · Unknown · Drazraeltod Pychao

Name of the Vulnerable Software and Affected Versions: DrAzraelTod pyChao affected versions not specified Description: A critical issue was found in DrAzraelTod pyChao, affecting the function klauen/lesen of the file mod fun/ init .py. This issue leads to sql injection. Recommendations: At the...

EulerOS Virtualization 3.0.2.6 : cloud-init (EulerOS-SA-2023-1085)

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'sshdeletekeys: 0', disabling cloud-init's...

Taxonomy Switcher 跨站脚本漏洞

Taxonomy Switcher is a taxonomy that switches terms by a specific parent of another taxonomy. A cross-site scripting vulnerability exists in Taxonomy Switcher versions prior to 1.0.4, which stems from a problem with the function taxonomyswitcherinit in the file taxonomy-switcher.php, which can le...

PT-2023-10192 · Webdevstudios · Taxonomy-Switcher Plugin

Name of the Vulnerable Software and Affected Versions: WebDevStudios taxonomy-switcher Plugin versions up to 1.0.3 Description: A problematic issue was found in the WebDevStudios taxonomy-switcher Plugin, affecting the taxonomy switcher init function of the file taxonomy-switcher.php. This issue...

PT-2023-9334 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the EFI initialization error path. When runtime services are not supported or have been disabled, the runtime services workqueue i...

PT-2025-41044

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a reference count leak bug in the omap4 sram init function when using ARM OMAP2+ platforms. The of find compatible node function increments the reference count ...

WordPress Yith WooCommerce Gift Cards Premium 3.19.0 Shell Upload Vulnerability

Description: Unauthenticated Arbitrary File Upload Affected Plugin: Yith WooCommerce Gift Cards Premium Plugin Slug: yith-woocommerce-gift-cards-premium Affected Versions: = 3.19.0 CVE ID: CVE-2022-45359 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N...

The vulnerability of the mtk_vcodec_fw_vpu_init() function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c file allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the mtkvcodecfwvpuinit function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c file is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...

CVE-2022-4024

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts...

CVE-2022-4024 Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts...