PT-2023-9765 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a format-overflow warning in the f2fs component of the Linux kernel. The warning occurs when using the gcc compiler with the W=1 option. The problem is in the...

CVE-2023-40648

The CVE-2023-40648 entry concerns the Messaging component where a missing permission check could allow local information disclosure without requiring additional execution privileges. Reported across multiple sources, the issue affects Information Confidentiality (per CVSS) with local attack vecto...

CVE-2023-40645

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-40631

In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...

ASB-A-224771621

In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges...

CVE-2023-25529

The CVE-2023-25529 vulnerability affects NVIDIA DGX H100 BMC and DGX A100 BMC, in the host KVM daemon, allowing an unauthenticated attacker to observe timing differences and leak another user’s session token. Reported impact includes information disclosure, privilege escalation, and data tamperin...

CVE-2023-38152

Technical details about CVE-2023-38152 (affected product, vulnerable component, impact, or fixes) are not publicly provided in the connected documents; monitor for updates.

Out-of-bounds

In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-35683

In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-28010 HCL Domino is susceptible to a sensitive information disclosure vulnerability

In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks...

CVE-2023-20839

In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326409...

CVE-2023-20825

In duraspeed, a missing permission check enables local information disclosure without extra execution privileges or user interaction. Affected component/feature is unspecified in the provided details, and the vulnerability is linked to patch ALPS07951402 (Issue ALPS07951413). Exploitation is desc...

CVE-2023-20824

CVE-2023-20824 affects duraspeed components (MediaTek context) and is caused by a missing permission check, enabling local information disclosure without extra privileges or user interaction. The vulnerability is described across multiple sources (including Red Hat and NVD records) and is associa...

CVE-2023-38465

CVE-2023-38465 affects the ims service, with a missing permission check that could lead to local information disclosure. The CVSSv3.1 base score is 5.5 (Privileges Required: Low, Attack Vector: Local, Confidentiality Impact: High, no impact on integrity/availability). Connected sources confirm th...

ASB-A-245137718

In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-41750

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

Microsoft Edge (Chromium) < 116.0.1938.54 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.54. It is, therefore, affected by multiple vulnerabilities as referenced in the August 21, 2023 advisory. - Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote...

CVE-2023-40370 IBM Robotic Process Automation information disclosure

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content if the remote REST request computer policy is enabled. IBM X-Force ID: 263470...

CVE-2023-40370

The CVE-2023-40370 entry affects IBM Robotic Process Automation runtime versions 21.0.0 through 21.0.7.1, where information disclosure of script content can occur if the remote REST request computer policy is enabled. The issue is described in the IBM bulletin and corroborated by Red Hat and NVD ...