PT-2023-33038 · Unknown · Securitycomponent

Name of the Vulnerable Software and Affected Versions: Software versions prior to 2.4.8 and 1.3.18 Description: The issue allows forms secured by SecurityComponent to be submitted to any action without triggering the tampering protection. This could lead to mass assignment issues in applications...

PT-2023-14504

Name of the Vulnerable Software and Affected Versions ActiveRecord versions prior to 6.1.7.1 ActiveRecord versions prior to 7.0.4.1 Description A denial of service issue is present in ActiveRecord's PostgreSQL adapter. When a value outside the range for a 64bit signed integer is provided to the...

SUSE-SU-2023:0094-1 Security update for python36-setuptools

This update for python36-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

PT-2023-33154 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to the asus-ec-sensors component in the Linux Kernel, specifically with the devm kcalloc function. The actual impact and attack plausibility have not yet been proven...

PT-2023-33155 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a null pointer check in the coretemp component of the hwmon subsystem. It was introduced in version v3.0 and fixed in version v6.0.12. The actual impact and attack...

PT-2023-34077 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.86 Description: The issue introduces active flags to prevent Use After Free UAF when an applicant uninitializes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2023-14216 · Adeel Ahmed · Ip Blacklist Cloud

Name of the Vulnerable Software and Affected Versions: Adeel Ahmed's IP Blacklist Cloud plugin versions prior to 5.01 Description: The issue is related to an authentication SQL Injection vulnerability. Recommendations: For versions prior to 5.01, update to version 5.01 or later to resolve the iss...

PT-2023-33198 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak issue was discovered in the dpaa2-switch component, specifically in the dpaa2 switch acl entry add and dpaa2 switch acl entry remove functions. The actual impact and attack...

PT-2023-34148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A refcount leak was discovered in the f hid gadget of the Linux Kernel. The issue was introduced in version v3.19 and is fixed in version v5.15.86. The actual impact and attack plausibility...

PT-2023-34090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential shift-out-of-bounds issue in the brcmf fw alloc request function may exist. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33492 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.0.18 Description: A memory leak issue was discovered when freeing IOTLBs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.19 through...

PT-2023-34542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential security issue exists due to a pci device refcount leak in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33113 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A memory leak issue was discovered in the gpiochip setup dev function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34142 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns NULL-pointer dereferences in the gpiolib cdev. It was introduced in version v4.8 and fixed in Linux Kernel version v5.15.86. The actual impact and attack plausibility hav...

PT-2023-18407

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to v6.14 Description The issue allows a remote unauthenticated attacker to redirect a user to an arbitrary web site, potentially conducting a phishing attack by having the user access a specially crafted URL...

PT-2023-33082 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue concerns the initialization of mailbox messages for VF reset. It was introduced in version v4.0 and fixed in version v6.0.15. The actual impact and attack plausibility have not yet...

PT-2023-33869 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the handling of V4L2 fwnode data in the Linux Kernel, specifically in the ov5648 driver. It is related to freeing this data on unbind. The actual impact and attack...

PT-2023-14417 · Unknown · Fc46-Webbridge

Name of the Vulnerable Software and Affected Versions: FC46-WebBridge versions prior to 3.7.6.25p0 3.2.2.17p0 4.7p0 Description: An issue in the web server of FC46-WebBridge allows arbitrary files and configurations to be read via directory traversal over TCP port 8888. Recommendations: For...

PT-2023-33453 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.19 Description: The issue concerns the combination of a bootloader-provided RNG seed with RNG protocol output in the EFI implementation. The actual impact and attack plausibility have not yet been proven...

PT-2023-33863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns a device name leak that occurs when registering a device fails in the add mtd device function. This problem was introduced in version v2.6.30 and is fixed in Linux Kernel...