PT-2023-18994 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.2 Description: The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. Recommendations: For versions prior to 13.2, update to macOS Ventura 13.2 to resolve the issue...

PT-2023-14213 · WordPress · All-In-One Security

Name of the Vulnerable Software and Affected Versions: All-In-One Security AIOS WordPress plugin versions prior to 5.1.3 Description: The issue concerns a leak of plugin settings, including the email address used by the plugin. Recommendations: For All-In-One Security AIOS WordPress plugin versio...

PT-2023-12133 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: CuppaCMS versions prior to commit 4c9b742b23b924cf4c1f943f48b278e06a17e297 Description: The issue allows attackers to gain access to arbitrary user sessions through a session fixation vulnerability. Recommendations: For versions prior to comm...

PT-2023-13779 · Mitsubishi · Melsec Iq-F Series Fx5Uc-32Mr/Ds-Ts +4

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z versions 1.280 and prior Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z versions 1.074 and prior Mitsubishi Electric Corporation MELSEC iQ-F Series FX5UC-xMy/z...

WordPress 404 to 301 Plugin < 3.1.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:404to301project:404to301"; ifdescription...

PT-2023-18837

Name of the Vulnerable Software and Affected Versions Kodi Home Theater Software versions up to 19.5 Description A heap buffer overflow issue allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument. This can lead to a denial of service...

PT-2023-15001 · Sewio · Sewio'S Real-Time Location System (Rtls) Studio

Name of the Vulnerable Software and Affected Versions: Sewio’s Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2 Description: The issue concerns cross-site scripting in the backup services of the software. An attacker could exploit this to execute arbitrary commands...

PT-2023-1077 · Sudo +11 · Sudo +11

Name of the Vulnerable Software and Affected Versions: Sudo versions 1.8.0 through 1.9.12p1 Description: The issue is related to the sudoedit feature in Sudo, which mishandles extra arguments passed in user-provided environment variables, such as SUDO EDITOR, VISUAL, and EDITOR. This allows a loc...

UBUNTU-CVE-2022-23538

github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services SCS Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectl...

PT-2023-34471 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue in the ocxl file register afu function may lead to a name leak. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2023-33216 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak issue was discovered in the gpiochip setup dev function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-33359 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: The issue concerns too strict blanking sanity checks in the v4l2-dv-timings.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33081 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to a buffer overflow in the setup handler of the USB gadget UVC driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34306 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the use of kzalloc too early in the mips: ralink: mt7621 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A refcount leak was discovered in the f hid gadget of the Linux Kernel. The issue was introduced in version v3.19 and is fixed in version v5.15.86. The actual impact and attack plausibility...

PT-2023-8991 · Unknown · Profilepress

Name of the Vulnerable Software and Affected Versions: ProfilePress versions through 4.13.1 Description: The issue is related to a Missing Authorization vulnerability in the ProfilePress Membership Team plugin for WordPress. This vulnerability is associated with a function named admin notice and ...

PT-2023-33813 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the xprtrdma component, specifically in the rpcrdma req create function, where regbuf data is not properly freed. This could potentially lead to security...

PT-2023-34561 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to a use-after-free in btf dump name dups. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33491 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the net/mlx5e component, where the destination encapsulation is not properly cleared during neighbor update deletion. This could potentially lead to security...

PT-2023-34410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns the return type of the netiucv tx function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions prior to...