PT-2023-19604 · Jenkins · Jenkins Openid Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenID Plugin versions 2.4 and earlier Description: The issue arises because the plugin does not invalidate the previous session on login. Recommendations: For Jenkins OpenID Plugin versions 2.4 and earlier, update to a version later...

PT-2023-19587 · Jenkins · Jenkins Bitbucket Oauth Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Bitbucket OAuth Plugin versions 0.12 and earlier Description: The issue arises because the Jenkins Bitbucket OAuth Plugin does not invalidate the previous session on login, which can lead to potential security risks. Recommendations:...

PT-2023-19611 · Jenkins · Jenkins View-Cloner Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins view-cloner Plugin versions 1.1 and earlier Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. Users with Extended Read permission or access to the Jenkins controller fi...

PT-2023-19386 · Signal · Signal Desktop +1

Name of the Vulnerable Software and Affected Versions: Signal Desktop versions prior to 6.2.0 Description: The issue allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some case...

PT-2023-15423 · WordPress · Oneclick Chat To Order

Name of the Vulnerable Software and Affected Versions: OneClick Chat to Order WordPress plugin versions prior to 1.0.4.2 Description: The issue arises from the plugin not validating and escaping some of its shortcode attributes before outputting them back in the page. This could allow users with ...

PT-2023-13592 · Unknown · Database Performance Analyzer

Name of the Vulnerable Software and Affected Versions: Database Performance Analyzer DPA versions 2022.4 and older Description: The issue concerns authenticated reflected cross-site scripting, where certain URL vectors are susceptible to this type of attack. Recommendations: For versions 2022.4 a...

CVE-2022-23538 User credentials leaked to third-party service via HTTP redirect in scs-library-client

github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services SCS Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectl...

PT-2023-33484 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a refcount leak in the sifive gpio probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33764 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a WARNING in the ipr init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.34 and fixed in Linux Kernel...

PT-2023-33183 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue is related to a potential security vulnerability in the Bluetooth L2CAP protocol, specifically an u8 overflow. The actual impact and attack plausibility have not yet been proven...

PT-2023-33339 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.8 through 5.10.157 Description: The issue concerns an out-of-bounds read in the afe4403 read raw function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33301 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to a potential security vulnerability in the xen/netback component. It involves calling kfree skb with interrupts disabled, which may have security implications. The...

PT-2023-33179 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v6.0.11 Description: The issue concerns an out-of-bounds read in the afe4403 read raw function. It was introduced in version v4.8 and fixed in version v6.0.12. The actual impact and attack plausibility have...

PT-2023-33284 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.16 through 5.10.158 Description: A potential use-after-free issue was identified in the hix5hd2 rx function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-33265 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an out of bounds check in the mvneta driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33755 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a possible memory leak in the class register function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.10 and fixe...

PT-2023-33775 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential security issue is identified in the Linux Kernel, related to the removal of debugfs when platform driver register fails. The actual impact and attack plausibility have not yet be...

PT-2023-33504 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a problem with GEM handle creation ref-counting in the drm/panfrost component. The actual impact and potential for attack have not been proven yet. Recommendations: F...

PT-2023-33223 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A potential security issue exists in the Linux Kernel, specifically in the gup pud range function for DAX. The actual impact and attack plausibility have not yet been proven. Recommendation...