PT-2023-35074 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.5 through v6.1.7 Description: A potential NULL dereference issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v6.1.5 through...

PT-2023-35342 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue is related to a null pointer dereference when the host dies, potentially leading to a security vulnerability. The actual impact and attack plausibility have not yet been proven...

PT-2023-34929 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v6.1.10 Description: A potential double-free issue was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.5 through v6.1.10, update ...

PT-2023-34989 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the trace printk function, which may not output as soon as it can be used. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34922 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue concerns the gfs2 component, specifically with how it handles inline inodes. It is noted that the actual impact and potential for attack have not been proven yet. Recommendations:...

SUSE-SU-2023:0375-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: IBM Security Update November 2022: bsc1205302, bsc1204703 - CVE-2022-3676: A security vulnerability was fixed in version 8.0.7.20, adding the reference here...

PT-2023-15016 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions 3.8 and below Description: The issue is related to improper access control. An authenticated malicious admin user can edit the general client policy for which the user is not authorized. Recommendations: For Wys...

JVN#60320736: NEC PC Settings Tool vulnerable to missing authentication for critical function

PC Settings Tool is an application pre-installed on computers provided by NEC by default. PC Settings Tool Library contained in the application is vulnerable to missing authentication for critical function CWE-306. Impact A general user of the computer which the affected product is installed may...

Impact of OpenSSL Vulnerabilities Advisory Released On February 7, 2023

OpenSSL has released a security advisory to address multiple vulnerabilities affecting OpenSSL versions 3.0, 1.1.1, and 1.0.2.CVE-2023-0286 - X.400 address type confusion in X.509 GeneralNameCVE-2022-4304 - Timing Oracle in RSA DecryptionCVE-2022-4203 - X.509 Name Constraints Read Buffer...

PT-2023-18211 · Samsung · Samsung Flow For Pc

Name of the Vulnerable Software and Affected Versions: Samsung Flow for PC version 4.9.14.0 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For Samsung Flow for PC version...

PT-2023-18199 · Samsung · Bixby Vision

Name of the Vulnerable Software and Affected Versions: Bixby Vision versions prior to 3.7.70.17 Description: The issue is related to improper input validation, which allows an attacker to access Bixby Vision data. Recommendations: For versions prior to 3.7.70.17, update to version 3.7.70.17 or...

PT-2023-6770 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2023.6 Description: The issue is related to a heap-based buffer overflow in the DXF file reading procedure. This occurs due to the lack of proper validation of the length of user-supplied...

PT-2023-18194 · Nfctile · Nfctile

Name of the Vulnerable Software and Affected Versions: NfcTile versions prior to SMR Jan-2023 Release 1 Description: The issue is related to improper access control, allowing an attacker to use NFC without user recognition. Recommendations: For versions prior to SMR Jan-2023 Release 1, update to...

PT-2023-18210 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow for Android versions prior to 4.9.04 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For versions prior...

PT-2023-19940 · Nextcloud · Nextcloud Office

Name of the Vulnerable Software and Affected Versions: Nextcloud Office versions prior to 7.0.2 Nextcloud Office versions prior to 6.3.2 Nextcloud Office versions prior to 5.0.10 Nextcloud Office versions prior to 4.2.9 Nextcloud Office versions prior to 3.8.7 Description: The Collabora integrati...

PT-2023-1845 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to incorrect checking of the return value of a method or function in the Tbase database server of the B&R APROL software solution for monitoring industrial systems. This c...

PT-2023-14599 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to an Improper Input Validation vulnerability that allows SQL Injection in Smartpower Web. This vulnerability can be exploited due to the lack of proper validation of...

MGASA-2023-0035 Updated nodejs-minimist packages fix security vulnerability

Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906...

J-BusinessDirectory, 5.7.7 and prior, Other

In the J-BusinessDirectory version 5.8.3 we have updated guzzlehttp to the latest version, 7.5.0 and to PSR 2.1.5...

SUSE-SU-2023:0275-1 Security update for rubygem-activesupport-5_1

This update for rubygem-activesupport-51 fixes the following issues: - CVE-2023-22796: Fixed a potential denial of service when passing a crafted input to the underscore method due to an inefficient regular expression bsc1207454...