PT-2023-33127 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a race condition with cookie lru and use cookie. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2023-34729 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.337 Description: A memory leak issue exists in the ocfs2 stack glue init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33208 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a potential security problem in the xen-netfront component. It was introduced in version v2.6.24 and fixed in version v5.15.83. The actual impact and attack...

PT-2023-33317 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: A bounds check issue in the ASoC: ops for sx controls has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33151 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns the removal of used dynamic events, which may lead to security implications. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns a potential security problem in the baycom epp module of the Linux Kernel, specifically with the return type of the baycom send packet function. The actual impact and...

PT-2023-33152 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a NULL pointer dereference in the nilfs palloc commit free entry function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-14515 · Codelights · Sidebar Widgets

Name of the Vulnerable Software and Affected Versions: The Sidebar Widgets by CodeLights WordPress plugin versions 1.4 and earlier Description: The issue allows users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high-privilege use...

pgAdmin 4 vulnerable to open redirect

Overview pgAdmin 4 provided by pgAdmin Project contains an open redirect vulnerability CWE-601. SHIGA TAKUMA of BroadBand Security, Inc. and Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

PT-2023-13614 · Easyvista · Easyvista

Name of the Vulnerable Software and Affected Versions: EasyVista versions 2020.2.125.3 through 2022.1.109.0.03 Description: An issue was discovered that allows SQL injection through some parameters. Recommendations: For versions 2020.2.125.3 through 2022.1.109.0.03, update to version...

PT-2023-1098 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Android versions prior to 5.13.0 Description: The issue is related to incorrect restriction of the path name to a directory with limited access, allowing a third-party app to exploit this and read and write to the Zoom application da...

PT-2022-26193 · WordPress · Sliderby10Web Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Sliderby10Web WordPress plugin versions prior to 1.2.53 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for exampl...

K000130278: Apache Heron vulnerability CVE-2021-42010

Security Advisory Description Heron versions = 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue. CVE-2021-42010 Impact There is no impact; F5 products are not affected by this...

Zenphoto vulnerable to cross-site scripting

Overview Zenphoto contains a stored cross-site scripting vulnerability CWE-79. Terada Yu of Fujitsu System Integration Laboratories reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be...

PT-2022-7570 · Libde265 +1 · Libde265 +1

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.9 Description: The issue is related to a buffer overflow in the put qpel fallback function of the Libde265 video codec implementation. This can allow an attacker to access confidential data, compromise data integrity, and...

PT-2022-16049 · Unknown · Linux-Loader

Name of the Vulnerable Software and Affected Versions: linux-loader versions prior to 0.8.1 Description: The issue arises when the linux-loader crate uses offsets and sizes from ELF headers to determine read offsets. If these offsets point beyond the file's end, it could lead to an infinite loop ...

SUSE-SU-2022:4395-1 Security update for samba

This update for samba fixes the following issues: Version update to 4.15.12. Security issues fixed: - CVE-2022-2031: Fixed AD users that could have bypassed certain restrictions associated with changing passwords bsc1201495. - CVE-2022-32742: Fixed SMB1 code that does not correctly verify...

PT-2022-36396 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.0 through 5.4.224 Description: The issue is related to a possible memory leak in the iio sysfs trig init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36038 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the napi schedule prep function, which is used to ensure ownership of a napi. The actual impact and...

PT-2022-36089 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to a memory leak in the blk-mq module. It was introduced in version v5.2 and fixed in version v6.0.8. The actual impact and attack plausibility have not yet been proven...