PT-2023-33216 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak issue was discovered in the gpiochip setup dev function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-33536 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue concerns kretprobe events missing on 2-core KVM guest. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33757 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential memory leak issue was discovered in the dio init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33236 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-16177 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.14 Description: The issue is related to Cross-site Scripting XSS - Stored, which can result in stolen user cookies. A proof of concept involves logging in with a dev account, navigating to specific...

Tiki Wiki CMS Groupware < 24.1 Multiple Vulnerabilities

Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple vulnerabilities in PIXELA PIX-RT100

Overview PIX-RT100 provided by PIXELA CORPORATION contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-22304 Backdoor access issue CWE-912 - CVE-2023-22316 MASAHIRO IIDA of LAC Co.,Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the develop...

PT-2023-1238 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.3R3-S7 Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S8, 19.4R3-S10 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S6 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5...

PT-2023-1284 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.2R3-S5 Juniper Networks Junos OS versions 20.3 prior to 20.3R3-S5 Juniper Networks Junos OS versions 20.4 prior to 20.4R3-S4 Juniper Networks Junos OS versions 21.1 prior to 21.1R3-S3 Juniper...

PT-2023-1038 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30418 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 22.003.20282 and earlier Description: The issue is related to an out-of-bounds write vulnerability tha...

PT-2023-1111 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to insufficient input validation in Adobe InDesign, which could allow an attacker to execute arbitrary code. Exploitation of...

PT-2023-1121 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.003.20282 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 20.005.30418 and earlier Description: A Heap-based Buffer Overflow issue could result in arbitrary cod...

PT-2023-1030 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 18.0 and earlier Adobe InCopy versions 17.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...

KLA20150 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Network Service can be exploited to cause denial of...

PT-2023-14935 · Mpd · Mpd

Name of the Vulnerable Software and Affected Versions: MPD Music Player Daemon version 0.23.10 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For MPD Music Player Daemon version 0.23.10, update to a version that contains a fix for th...

PT-2023-1114 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. This...

PT-2023-14394 · WordPress · Vision Interactive

Name of the Vulnerable Software and Affected Versions: The Vision Interactive For WordPress plugin versions 1.5.3 and earlier Description: The issue allows users, such as contributor+, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, due to t...

Intel PROSet Wireless WiFi and Killer WiFi Advisory - Lenovo Support US

No description provided...

Apple TV < 16.2 Multiple Vulnerabilities (HT213535)

According to its banner, the version of Apple TV on the remote device is prior to 16.2. It is therefore affected by multiple vulnerabilities as described in the HT213535 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid169649; scriptversion"1.6";...

CVE-2023-22464 ViewVC XSS vulnerability in revision view changed path "copyfrom" locations

ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by a...