797 matches found
PT-2023-11384 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue was previously assigned a CVE identifier, but it was unused by HPE. The information is available via the National Vulnerability Database. Recommendations: At the moment, there...
PT-2023-14501 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...
PT-2023-12369 · Hewlett Packard · Hpe
Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: General information about the issue is not explicitly provided, but it is mentioned in relation to the National Vulnerability Database. Recommendations: At the moment, there is no information...
PT-2023-13721 · WordPress · Team Members
Name of the Vulnerable Software and Affected Versions: The Team Members WordPress plugin versions prior to 5.2.1 Description: The issue allows high-privilege users, such as editors, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example...
PT-2022-8345 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
PT-2022-28085 · Xstream · Stream
Name of the Vulnerable Software and Affected Versions: StreamX versions 6.02.01 through 6.04.34 Description: The issue allows authenticated users to gain unauthorized access to files on the server's filesystem due to a path traversal vulnerability. This affects StreamX applications that use the...
AZL-41275 CVE-2021-4238 affecting package influxdb for versions less than 2.7.3-3
Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by...
PT-2022-27111 · Pdftojson · Pdftojson
Name of the Vulnerable Software and Affected Versions: pdftojson version 94204bb Description: The issue is related to a stack overflow in the Object::copyObject:Object.cc component. This occurs due to a problem in the pdftojson commit 94204bb. Recommendations: For version 94204bb, consider applyi...
PT-2022-37538 · Suse · Suse Manager
Name of the Vulnerable Software and Affected Versions: SUSE Manager affected versions not specified Description: The issue is related to a fix mentioned in the release notes for SUSE Manager. No specific details about the issue are provided, such as its nature or potential impact. There is no...
PT-2022-28223 · Crates.Io · Mpl-Bubblegum +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allowed verification of a creator that did not sign by utilizing a provision in Token Metadata. This provision enables creators who have signed compressed NFTs to decompress...
PT-2022-17421 · Symantec · Messaging Gateway
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an authenticated user with the privilege to add or edit annotations on the Content tab to craft a malicious annotation. This malicious...
PT-2022-36541 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to a possible memory leak in the iio sysfs trig init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-36047 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to handling CPU faults on copy-on-write COW mappings in the Linux Kernel. The actual impact and potential for exploitation have not been proven yet. Recommendations: For...
PT-2022-36521 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to a use after free in the red enqueue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v4.19.265,...
PT-2022-36092 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: A null pointer dereference issue exists in the neigh table clear function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
PT-2022-36190 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: The issue is related to an incorrect match in dev args match device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2022-36547 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A potential memory leak issue was identified in the register pcpu function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-36393 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential memory leak issue exists due to a missing pci dev put call. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...
PT-2022-36795 · Mbed Tls · Mbed Tls
Name of the Vulnerable Software and Affected Versions: mbedtls affected versions not specified Description: A heap-use-after-free issue occurs in the mbedtls pkcs7 free function, which is called by mbedtls pkcs7 parse der. This issue is identified by a crash report. Recommendations: At the moment...
PT-2022-27240 · Unknown · Ddmp/Odmf Module
Name of the Vulnerable Software and Affected Versions: DDMP/ODMF module affected versions not specified Description: The issue concerns a service hijacking vulnerability in the DDMP/ODMF module. If exploited, this could lead to services becoming unavailable. Recommendations: At the moment, there ...