PT-2023-16040 · WordPress · Utubevideo Gallery

Name of the Vulnerable Software and Affected Versions: uTubeVideo Gallery WordPress plugin versions prior to 2.0.8 Description: The issue concerns the uTubeVideo Gallery WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page...

PT-2023-35302 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: A race condition exists between mounting and unmounting in the gadgetfs of the USB subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34939 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.1 through v6.1.10 Description: The issue is related to the USB Type-C UCSI driver in the Linux Kernel. It occurs when the system attempts to resume ports before they exist, potentially leading to undefined behavior...

PT-2023-35208 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to incorrect arithmetics when fetching VLAN header bits in the nft payload component of netfilter. The actual impact and attack plausibility have not yet been proven...

PT-2023-34987 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...

PT-2023-34994 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the stmmac component in the Linux Kernel, where not all safety features are enabled by default. This could potentially lead to security vulnerabilities, although the actual...

PT-2023-35236 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.56 through 5.10.165 Description: The issue is related to a pointer-leak due to insufficient speculative store bypass mitigation in the bpf component. The actual impact and attack plausibility have not yet been prove...

PT-2023-35022 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to the misuse of kvcalloc with GFP NOFAIL in erofs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-35213 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.166 Description: The issue is related to the x86/i8259 legacy PIC interrupts, which are marked with IRQ LEVEL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35226 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.0 through v5.10.165 Description: The issue concerns the shape of output reports. It was introduced in version v4.0 and fixed in version v5.10.166. The actual impact and attack plausibility have not yet been proven...

PT-2023-16119 · WordPress · Wp Google Review Slider

Name of the Vulnerable Software and Affected Versions: WP Google Review Slider versions prior to 11.8 Description: The issue arises from improper sanitization and escaping of a parameter before its use in a SQL statement, resulting in a SQL injection that can be exploited by users with a role as...

PT-2023-35269 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the irq is not for aux transfer. The actual impact and attack plausibility have not yet been prove...

PT-2023-35177 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A potential issue exists in the Linux Kernel, specifically in the spk ttyio release function, which may lead to a null pointer dereference. The actual impact and attack plausibility have no...

PT-2023-35132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to a use-after-free of a listening socket. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35182 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.90 Description: A null pointer dereference issue occurs when the host dies, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-35339 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.272 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2023-35001 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the shape of output reports. It was introduced in version v4.0 and fixed in version v6.1.9. The actual impact and attack plausibility have not yet been proven...

PT-2023-35113 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: A potential NULL dereference issue was identified in the efi mem reserve persistent function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34943 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves the can: isotp module, where the split tx timer is divided into transmission and timeout. The actual...

PT-2023-34966 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.1.10 Description: The issue is related to an out of bounds read warning in gcc-11. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to 6.1.10...