PT-2023-33548 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to the ntfs fill super function in the fs/ntfs3 module, where a GFP NOWARN allocation is used. The actual impact and attack plausibility have not yet been proven...

PT-2023-34382 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns a fix in the return type of certain functions, specifically sti dvo connector mode valid, sti hda connector mode valid, and sti hdmi connector mode valid. The actual...

PT-2023-33870 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A memory leak issue exists in the hi846 parse dt function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.16,...

PT-2023-34034 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the allocation of a zone buffer in the pstore/zone using GFP ATOMIC. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33661 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the return type of the netcp ndo start xmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34453 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the power supply fix residue sysfs file in the error handle route of the power supply register function. The actual impact and attack plausibility have not yet been...

PT-2023-33911 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns potential name leaks in error paths. It was introduced in version v5.16 and is fixed in Linux Kernel version v6.0.16. The actual impact and attack plausibility have not ye...

PT-2023-33190 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.84 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the MediaTek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

PT-2023-33163 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a sleep in atomic at close time in mptcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33229 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a problem with taking the right locks for page table retraction in mm/khugepaged. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33205 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a bounds check in the nci struct nfc target arrays. It was introduced in version v3.4 and fixed in version v5.15.83. The actual impact and attack plausibility have not ye...

PT-2023-18392 · Maho Pbx · Maho-Pbx Netdevancer Vsg Lite/Uni +2

Name of the Vulnerable Software and Affected Versions: MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud versions prior to 1.11.00 MAHO-PBX NetDevancer VSG Lite/Uni versions prior to 1.11.00 MAHO-PBX NetDevancer MobileGate Home/Office versions prior to 1.11.00 Description: The issue allows a remote...

PT-2023-34438 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue exists in the Linux Kernel, where the sk error queue is not properly purged in the sk stream kill queues function. The actual impact and attack plausibility have not yet...

PT-2023-33456 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a double release compute pasid in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-16127 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-16161 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...

CVE-2022-21191

Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the getPath function...

PT-2023-18544 · Rsshub · Rsshub

Name of the Vulnerable Software and Affected Versions: RSSHub affected versions not specified Description: RSSHub is an open source RSS feed generator that is vulnerable to Server-Side Request Forgery SSRF attacks. This issue allows an attacker to send arbitrary HTTP requests from the server to...

Remote Code Execution

rxvt-unicode is vulnerable to remote code execution. The package is vulnerable to a remote code execution via the Perl background extension when an attacker is able to control the data written to the user's terminal and certain options are set...