UBUNTU-CVE-2023-21882

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

AZL-13027 CVE-2022-36760 affecting package httpd for versions less than 2.4.55-1

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions...

CVE-2023-22278

m-FILTER prior to Ver.5.70R01 Ver.5 Series and m-FILTER prior to Ver.4.87R04 Ver.4 Series allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have been...

PT-2023-34148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A refcount leak was discovered in the f hid gadget of the Linux Kernel. The issue was introduced in version v3.19 and is fixed in version v5.15.86. The actual impact and attack plausibility...

PT-2023-1209 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.31 and prior Description: The issue is related to insufficient input validation in the encryption component of MySQL Server, allowing a remote attacker to gain unauthorized access to read, modify, or delete data, or...

PT-2023-33256 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential security issue exists due to a null pointer dereference when the probe function fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33513 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns a corruption problem that occurs when online resizing a 1K bigalloc file system. The actual impact and potential for attack have not been fully determined. Recommendations...

PT-2023-33442 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

PT-2023-33657 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33369 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue concerns the protection of tpm pm suspend with locks. It was introduced in version v5.1 and fixed in Linux Kernel version v5.4.226. The actual impact and attack plausibility have...

PT-2023-33735 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A refcount leak was discovered in the f hid gadget of the Linux Kernel. The issue was introduced in version v3.19 and is fixed in version v6.0.16. Recommendations: For Linux Kernel versions...

PT-2023-33420 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: A bug in the btrfs qgroup inherit function may cause issues due to sleeping from an invalid context. The actual impact and potential for exploitation have not been proven yet...

PT-2023-34022 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A potential security issue has been identified in the Linux Kernel, related to the fs/ntfs3 module. The issue concerns the attr load runs vcn function, where a null pointer check has been...

CVE-2023-0316

Path Traversal: '..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0...

phpMyFAQ cross-site scripting vulnerability (CNVD-2023-04315)

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.10, which stems from the presence of stored cross-site scripting XSS. No details of the vulnerability are provided at this time...

WordPress plugin WP Video Lightbox 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-0312

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0310

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

PT-2023-16164 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...