PT-2023-15058 · WordPress · Wp Trio Conditional Shipping For Woocommerce

Name of the Vulnerable Software and Affected Versions: Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin versions prior to 2.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user...

PT-2023-22997 · Avideo · Avideo

Name of the Vulnerable Software and Affected Versions: AVideo versions prior to 12.4 Description: The issue allows for remote code execution when an attacker embeds a malicious video link. An attacker could execute remote code on a system running AVideo. The exploitation involves appending a...

PT-2023-18453 · F5 · Big-Ip Edge Client

Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client versions 7.2.2 through 7.2.3.1 Description: A DLL hijacking issue exists in the BIG-IP Edge Client Windows Installer. This affects versions of the software starting from 7.2.2 up to but not including 7.2.3.1. Note that...

PT-2023-1424 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2020 Update 4 and earlier, 2022 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation requires use...

PT-2023-18851 · Selfwealth · Selfwealth Ios Mobile App

Name of the Vulnerable Software and Affected Versions: Selfwealth iOS mobile App version 3.3.1 Description: The issue concerns Insecure App Transport Security ATS Settings in the Selfwealth iOS mobile App. This means the app may not properly secure its communication, potentially allowing for...

PT-2023-18832 · Zoho · Zoho Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus version 14 Description: The issue is a cross site scripting XSS vulnerability. It affects the purchase component via PO. Recommendations: For Zoho ManageEngine ServiceDesk Plus version 14, update to a versio...

PT-2023-34841 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: A potential security issue exists due to a pci device refcount leak in the ixgbe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-34791 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v6.1.6 Description: A use-after-free bug was discovered in the dup user cpus ptr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.1...

PT-2023-34852 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A potential security issue exists due to a problem with not removing a map on creater process and device release. The actual impact and attack plausibility have not yet been proven...

PT-2023-34863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the io uring/io-wq component, where a worker is freed without being allocated for creation. The actual impact and attack plausibility have not yet been proven...

PT-2023-34803 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34734 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the separation of sysctl logic from CONFIG SMP in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-34912 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.304 Description: A general protection fault issue was discovered in the nilfs btree insert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34902 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue concerns the axi chan handle err function, where exception protection processing for vd is lacking. This could potentially lead to security vulnerabilities, although the actual...

PT-2023-34889 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: The issue is related to the regulator, specifically the da9211, and its use of an irq handler when ready. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-34767 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the io uring/io-wq component, where a worker is freed without being allocated for creation. The actual impact and attack plausibility have not yet been proven...

PT-2023-34766 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to io uring, where a lock overflowing occurs for IOPOLL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34784 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns the handling of cached open files in the nfsd4 open codepath. It was introduced in version v5.19 and fixed in version v6.1.7. The actual impact and attack plausibility have...

PT-2023-34835 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue concerns the use of a mutex in an IRQs disabled section within the powerpc/imc-pmu component. The actual impact and potential for attack have not been fully determined...

PT-2023-34888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.61 through 5.4.228 Description: A NULL-deref issue was discovered in the init error path of the EFI module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...