PT-2023-35104 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: The issue is related to the use of a flexible array for memcpy destination, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet be...

PT-2023-35045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to a null pointer dereference when the host dies, potentially leading to a security vulnerability. The actual impact and attack plausibility have not yet been proven...

PT-2023-35178 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the btrfs file system, where a failure to write the log tree when syncing the log does not abort the transaction. This could potentially lead to security...

PT-2023-34961 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to the bpf and sockmap components in the Linux Kernel. It involves a check for any of tcp bpf prots when cloning a listener. The actual impact and attack plausibility ha...

PT-2023-35321 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.272 Description: A possible memory leak was identified in the sdma transfer init function of the imx-sdma driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-14986 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions 3.8 and below Description: The issue concerns improper access control, allowing a malicious admin user to disable or delete users under administration and unassigned admins for which the group admin is not...

PT-2023-16520 · Modoboa · Modoboa

Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.0.4 Description: The issue is related to an Authentication Bypass by Primary Weakness. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2023-18203 · Smr · Smr

Name of the Vulnerable Software and Affected Versions: Phone application versions prior to SMR Feb-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to access sensitive information. This is achieved via implicit broadcast. Recommendations: For...

PT-2023-18191 · Unknown · Semchameleonhelper

Name of the Vulnerable Software and Affected Versions: SemChameleonHelper versions prior to SMR Jan-2023 Release 1 Description: The issue is related to improper handling of insufficient permissions or privileges, allowing an attacker to modify network-related values, network code, carrier ID, and...

PT-2023-18193 · Smr · Smr

Name of the Vulnerable Software and Affected Versions: SMR versions prior to Jan-2023 Release 1 Description: A hardcoded AES key is used to encrypt card emulation PINs in NFC, allowing attackers to access the PIN. Recommendations: For versions prior to Jan-2023 Release 1, update to Jan-2023 Relea...

PT-2023-18186 · Samsung · Secure Folder

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR Jan-2023 Release 1 Description: The issue is caused by an improper implementation logic in Secure Folder, which allows the Secure Folder container to remain unlocked under certain conditions. Recommendation...

PT-2023-16453 · WordPress · Wicked Folders

Name of the Vulnerable Software and Affected Versions: Wicked Folders plugin for WordPress versions up to, and including, 2.18.16 Description: The issue is related to a missing capability check on the ajax unassign folders function, which allows authenticated attackers with subscriber-level...

PT-2023-14596 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to Improper Input Validation, which allows PHP Local File Inclusion in Smartpower Web. This can potentially be exploited due to the lack of proper validation of user...

PT-2023-1741 · B&R · B&R Aprol Tbase Server

Name of the Vulnerable Software and Affected Versions: B&R APROL Tbase server versions prior to R 4.2-07 Description: The issue is caused by a lack of verification in the B&R APROL Tbase server, which may lead to memory leaks when receiving messages. This can be exploited by a remote attacker to...

PT-2023-14599 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to an Improper Input Validation vulnerability that allows SQL Injection in Smartpower Web. This vulnerability can be exploited due to the lack of proper validation of...

PT-2023-16470 · WordPress · Wicked Folders

Name of the Vulnerable Software and Affected Versions: Wicked Folders plugin for WordPress versions up to, and including, 2.18.16 Description: The issue is related to a missing capability check on the ajax add folder function, allowing authenticated attackers with subscriber-level permissions and...

PT-2023-12325 · Automad · Automad

Name of the Vulnerable Software and Affected Versions: automad version 1.7.5 Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the user name field when adding a user. Recommendations: For automad version 1.7.5, update to a version that contains a fix...

PT-2023-12285 · Gurock · Gurock Testrail

Name of the Vulnerable Software and Affected Versions: Gurock TestRail versions prior to 7.1.2 Description: The issue allows remote authenticated attackers to run arbitrary code via the reference field in milestones or description fields in reports. This is a Cross Site Scripting XSS issue...

PT-2023-12289 · Kitecms · Kitecms

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: An issue with access control in KiteCMS allows remote attackers to view sensitive information by manipulating the path in the application URL. Recommendations: For KiteCMS version 1.1, update to a version that...

PT-2023-19305 · Opendds · Opendds

Name of the Vulnerable Software and Affected Versions: OpenDDS versions prior to 3.23.1 Description: The issue affects OpenDDS applications exposed to untrusted RTPS network traffic, which may cause them to crash when parsing badly-formed input. Recommendations: For versions prior to 3.23.1, upda...