PT-2023-35022 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to the misuse of kvcalloc with GFP NOFAIL in erofs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-35236 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.56 through 5.10.165 Description: The issue is related to a pointer-leak due to insufficient speculative store bypass mitigation in the bpf component. The actual impact and attack plausibility have not yet been prove...

PT-2023-34998 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns a node refcount leak in the fwnode graph get next endpoint function. This problem was introduced in version v5.15 and is fixed in Linux Kernel version v6.1.9. The actual...

PT-2023-35081 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34960 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to the arm64 device tree for imx8mm-verdin, where the eth-phy is not properly powered down. This problem was introduced in version v5.18 and is fixed in version v6.1.11...

PT-2023-35134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue concerns a potential Spectre v1 gadget in the ip metrics convert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-16040 · WordPress · Utubevideo Gallery

Name of the Vulnerable Software and Affected Versions: uTubeVideo Gallery WordPress plugin versions prior to 2.0.8 Description: The issue concerns the uTubeVideo Gallery WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page...

PT-2023-35067 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue concerns a possible null dereference when updating MAC security entity SecY in the net/mlx5e component. The actual impact and attack plausibility have not yet been proven...

PT-2023-35226 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.0 through v5.10.165 Description: The issue concerns the shape of output reports. It was introduced in version v4.0 and fixed in version v5.10.166. The actual impact and attack plausibility have not yet been proven...

PT-2023-16123 · WordPress · Wp Yelp Review Slider

Name of the Vulnerable Software and Affected Versions: WP Yelp Review Slider WordPress plugin versions prior to 7.1 Description: The issue is related to a SQL injection that occurs due to improper sanitization and escaping of a parameter before it is used in a SQL statement. This can be exploited...

PT-2023-20171 · Unknown · Ra-Ui-Materialui +1

Name of the Vulnerable Software and Affected Versions: react-admin versions prior to 3.19.12 and 4.7.6 ra-ui-materialui versions prior to 3.19.12 and 4.7.6 Description: The issue affects all React applications built with react-admin and using the . This component outputs the field value using...

PT-2023-34987 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...

PT-2023-35018 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to a potential null pointer dereference in the sp usb phy probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-35088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v2.6.12 through v6.1.6 Description: The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-35195 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to a warning during failed attribute validation in the act mpls component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2023-34980 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.1.8 Description: The issue is related to the iavf schedule watchdog, which is triggered immediately when changing the primary MAC. The actual impact and attack plausibility have not yet been proven...

PT-2023-16539 · Unknown · Btcpay Server

Name of the Vulnerable Software and Affected Versions: btcpayserver/btcpayserver versions prior to 1.7.11 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing an attacker to inject malicious...

PT-2023-15413 · WordPress · Gigpress

Name of the Vulnerable Software and Affected Versions: GigPress WordPress plugin versions prior to 2.3.28 Description: The issue concerns the GigPress WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page or post. This could...

PT-2023-35182 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.90 Description: A null pointer dereference issue occurs when the host dies, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-34943 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves the can: isotp module, where the split tx timer is divided into transmission and timeout. The actual...