CVE-2024-57664

An issue in the sqlggroupnode component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

PT-2025-30212

Name of the Vulnerable Software and Affected Versions mbedtls versions prior to 3.6.4 Description The software contains a use-after-free issue in the mbedtls x509 string to names function. This function incorrectly frees a pointer that application code may still be using, leading to a potential...

CVE-2024-50076

In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in confontget font.data may not initialize all memory spaces depending on the implementation of vc-vcsw-confontget. This may cause info-leak, so to prevent this, it is safest to modify it to initialize...

PT-2024-6118 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 GitHub Enterprise Server versions 3.13.3, 3.12.8, and 3.11.14 are not vulnerable, but versions before these are affected. Description: An Incorrect Authorization issue was identified, allowing a...

Medium: ncurses

Issue Overview: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Affected Packages: ncurses Issue Correction: Run dnf update ncurses --releasever 2023.3.20240108 to update your system. New Packages: aarch64: ...

Important: ghostscript

Issue Overview: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. CVE-2023-36664 Affected Packages: ghostscript Issue Correction: Run dnf update ghostscript --releasever 2023.1.20230809 or dnf update...

PT-2023-4211 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: A logic issue was addressed with improved restrictions, which may allow an app to access user-sensitive data. The issue is related to the...

2023-02 Dynamic Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5022834)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

PT-2023-34798 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to an incorrect file map count for invalid pmd in the arm64/mm component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34159 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A memory leak issue was discovered in the test firmware init function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.14 and is...

PT-2022-36521 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to a use after free in the red enqueue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v4.19.265,...

postgresql:12 security update

postgresql 12.12-1 - Resolves: 2131177 - Update to version 12.12...

PT-2022-34641 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A potential issue exists in the Linux Kernel, related to a dentry leak in update sched domain debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-34661 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to the netfilter nf tables, where the hook list is not properly cleaned up when offload flags check fails. This is an automated ID intended to aid in discovery of...

PT-2022-33354 · Habana · Habanalabs/Gaudi

Name of the Vulnerable Software and Affected Versions: habanalabs/gaudi versions prior to v5.19.4 Description: The issue is related to a shift out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations: For habanalabs/gaudi versions prior to v5.19.4, update...

PT-2022-33711 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue is related to stuck flows on cleanup due to pending work in the netfilter flowtable. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33646 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A potential issue exists in the ieee80211 scan rx function, which may be related to a use-after-free UAF error. The actual impact and likelihood of an attack have not been confirmed...

PT-2025-26042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description A deadlock and link starvation issue in the outgoing data path of the Linux kernel's n gsm implementation has been resolved. The issue occurred due to the hard coupling of the upper and lower...

CVE-2022-21654 Incorrect configuration handling allows TLS session re-use without re-validation in Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised...

WordPress GiveWP Plugin < 2.10.4 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...