PT-2023-33571 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to an overflow check for attribute size in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33394 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: A potential use-after-free issue exists in the hisi femac rx function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is...

PT-2023-14847 · Panasonic · Panasonic Sanyo Cctv Network Cameras

Name of the Vulnerable Software and Affected Versions: Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x Description: The issue allows an attacker to perform changes with administrator level privileges by exploiting a CSRF vulnerability. Recommendations: For versions 1.02-05, upda...

PT-2023-33658 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.16 Description: A potential issue exists where the q vector is not properly freed unless a new one is allocated. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33448 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: A potential issue exists where a null pointer dereference occurs when the probe function fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-33835 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.10 and fix...

PT-2023-33540 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A double free issue was discovered in the dvb register device function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-33323 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.13 through v5.10.157 Description: A potential use-after-free issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.13 through...

PT-2023-33591 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a kmemleak in the orangefs sysfs init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-14493 · WordPress · Page Scroll To Id

Name of the Vulnerable Software and Affected Versions: Page scroll to id WordPress plugin versions prior to 1.7.6 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins...

PT-2023-14956 · WordPress · Greenshift

Name of the Vulnerable Software and Affected Versions: Greenshift WordPress plugin versions prior to 4.8.9 Description: The issue is related to the Greenshift WordPress plugin, which does not validate and escape one of its shortcode attributes. This could allow users with a role as low as...

PT-2023-16165 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...

MGASA-2023-0002 Updated xrdp packages fix security vulnerability

xrdp less than v0.9.21 contain a buffer over flow in xrdploginwndcreate function. CVE-2022-23468 xrdp less than v0.9.21 contain a buffer over flow in audinsendopen function. CVE-2022-23477 xrdp less than v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen function...

PT-2023-18545 · Unknown +1 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: a12nserver versions prior to 0.23.0 Description: The issue affects users of a12nserver who use MySQL, making them potentially vulnerable to SQL injection bugs. This could allow an attacker to obtain OAuth2 Access Tokens for unrelated users. T...

Multiple vulnerabilities in PIXELA PIX-RT100

Overview PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Backdoor access issue CWE-912 - CVE-2023-22316 MASAHIRO IIDA of LAC Co.,Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the develop...

PT-2023-14918 · Rumpus · Rumpus

Name of the Vulnerable Software and Affected Versions: Rumpus - FTP server version 9.0.7.1 Description: The issue allows for persistent cross-site scripting PXSS, which may enable the insertion of scripts into unspecified input fields. Recommendations: For version 9.0.7.1, update to a newer versi...

JVN#57296685: Multiple vulnerabilities in PIXELA PIX-RT100

PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.0 CVSS v2| AV:A/AC:L/Au:S/C:C/I:C/A:C| Base Score: 7.7...

ALSA-2023:0096 Moderate: dbus security update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fixes: dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets...

Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface...

Cisco Network Services Orchestrator Path Traversal Vulnerability

A vulnerability in the RESTCONF and NETCONF services of Cisco Network Services Orchestrator NSO could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of th...