PT-2025-18805

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-96.el9.x86 64 Description A vulnerability in the Linux kernel has been resolved, specifically in the scsi: qla2xxx module. The issue occurred when a command was completed in the abort path during driver...

PT-2023-16904 · WordPress · Rapidload Power-Up For Autoptimize

Name of the Vulnerable Software and Affected Versions: RapidLoad Power-Up for Autoptimize plugin for WordPress versions up to, and including, 1.7.1 Description: The issue is related to a missing capability check on the ucss connect function, allowing authenticated attackers with subscriber-level...

PT-2023-16889 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.16.6 Description: The issue is related to Cross-site Scripting XSS - Reflected, which affects the GitHub repository osticket/osticket. Recommendations: For versions prior to 1.16.6, update to version 1.16.6 or lat...

PT-2023-19295 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to v6 Description: An improper access control issue exists that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room. Recommendations: For versions prior t...

PT-2023-12206 · Wyomind · Wyomind Help Desk Magento 2 Extension

Name of the Vulnerable Software and Affected Versions: Wyomind Help Desk Magento 2 extension versions 1.3.6 and earlier Description: The issue allows an attacker to execute arbitrary code via a phar file upload in the ticket message field. This is achieved by exploiting a weakness in the...

PT-2023-12205 · Wyomind · Wyomind Help Desk Magento 2 Extension

Name of the Vulnerable Software and Affected Versions: Wyomind Help Desk Magento 2 extension versions 1.3.6 and before Description: The issue allows attackers to escalate privileges via a crafted payload in the ticket message field. This is a Cross Site Scripting vulnerability. Recommendations: F...

PT-2023-13563 · Hewlett Packard · Hpe Superdome Flex Server +1

Name of the Vulnerable Software and Affected Versions: HPE Superdome Flex Servers versions prior to 3.65.8 HPE Superdome Flex 280 Servers versions prior to 1.45.8 Description: A potential security issue has been identified in HPE Superdome Flex and Superdome Flex 280 servers, which could be local...

CVE-2023-25690

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the...

PT-2023-35463 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.168 Description: The issue concerns a potential NULL dereference in the pinctrl single. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.11 and fixed in...

PT-2023-35468 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.168 Description: The issue is related to the zero-initialization of the zlib workspace in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2023-16827 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

PT-2023-35453 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to a use-after-free in the ep remove wait queue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-35416 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue is related to the restoration of allocated resources on failed copyout in IB/hfi1. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35458 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue concerns a bounds check priority in the Linux Kernel's scheduling component. The actual impact and potential for attack have not been fully determined. Recommendations: For Linux...

PT-2023-35407 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue concerns a potential NULL dereference in the pinctrl single component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.11 and...

PT-2023-35493 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.306 Description: The issue is related to the usb bulk msg function in the Linux Kernel's USB subsystem. It involves passing act len in the error path, which may have potential security implications. The...

PT-2023-35417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: A potential issue in the ASoC: SOF: Intel: hda-dai component may lead to a stream tag leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35386 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.2 through v6.1.12 Description: The issue is related to a use-after-free in the ep remove wait queue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35419 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.95, upda...

PT-2023-35391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.13 Description: The issue is related to a missing call to kasan arch is ready, which may cause an Oops error. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...