1924 matches found
PT-2023-33775 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential security issue is identified in the Linux Kernel, related to the removal of debugfs when platform driver register fails. The actual impact and attack plausibility have not yet be...
PT-2023-33203 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to an unbalanced fwnode reference count in the mdio device release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
PT-2023-33400 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.6 through 4.19.268 Description: The issue is related to a PCI device reference count leak in the gpio: amd8111 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...
PT-2023-33202 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A potential use-after-free issue was identified in the hix5hd2 rx function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2023-33301 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to a potential security vulnerability in the xen/netback component. It involves calling kfree skb with interrupts disabled, which may have security implications. The...
PT-2023-33277 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.160 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the mediatek driver. It involves starting up with IRQs disabled. The actual impact and potential for...
PT-2023-34284 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns error handling in the cros usbpd notify init function. It was introduced in version v5.7 and fixed in version v5.15.86. The actual impact and attack plausibility have not...
PT-2023-33755 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a possible memory leak in the class register function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.10 and fixe...
PT-2023-33371 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. This problem was introduced in version v5.3 and is fixed in Linux Kernel version...
PT-2023-33080 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to extending a file within the last block. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.1...
PT-2023-16164 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...
PT-2023-7913 · WordPress · Crm Perks Forms
Name of the Vulnerable Software and Affected Versions: CRM Perks Forms – WordPress Form Builder versions prior to 1.1.0 Description: The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. This can be...
PT-2023-16049 · WordPress · Cpo Companion
Name of the Vulnerable Software and Affected Versions: CPO Companion plugin for WordPress versions up to, and including, 1.0.4 Description: The issue is related to Stored Cross-Site Scripting via several content type settings parameters due to insufficient input sanitization and output escaping...
PT-2023-1035 · Adobe · Dimension
Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.6 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...
PT-2023-1113 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe InDesign that could lead to disclosure of sensitive memory. An attacker could...
PT-2023-1029 · Adobe · Incopy
Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 18.0 and earlier Adobe InCopy versions 17.4 and earlier Description: The issue is related to a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user...
PT-2023-14176 · WordPress · Slimstat Analytics
Name of the Vulnerable Software and Affected Versions: Slimstat Analytics WordPress plugin versions prior to 4.9.3 Description: The issue allows unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged-in admins viewing the logs, due to the plugin's failure to...
PT-2023-13509 · Zoom · Zoom Rooms For Macos
Name of the Vulnerable Software and Affected Versions: Zoom Rooms for macOS versions prior to 5.11.4 Description: The issue concerns an insecure key generation mechanism in Zoom Rooms for macOS. Specifically, the encryption key used for Inter-Process Communication IPC between the Zoom Rooms daemo...