PT-2023-33171 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a use-after-free error when reverting the termination table in the net/mlx5e module. The actual impact and attack plausibility have not yet been proven...

PT-2023-34032 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A potential security issue exists due to a bug in the fast isolate around function, which may not stay within boundaries. The actual impact and attack plausibility have not yet been proven...

PT-2023-33124 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A potential security issue exists in the Linux Kernel, specifically in the gup pud range function for DAX. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-34341 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns the ext4 file system, specifically with fast-commit of encrypted directory operations. It was introduced in version v5.10 and fixed in version v5.10.163. The actual impa...

PT-2023-33526 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the remoteproc subsystem, specifically the imx dsp rproc module, where a lack of mutex protection for the workqueue could potentially lead to security vulnerabilities. The...

PT-2023-33745 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns a possible name leak in the ocxl file register afu function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-1200 · Oracle · Oracle Web Applications Desktop Integrator

Name of the Vulnerable Software and Affected Versions: Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Download component of Oracle Web Applications Desktop Integrator, part of the Oracle E-Busine...

PT-2023-33552 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v6.0.17 Description: A use-after-free UAF issue was discovered in the clone dtr function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.4 and is...

PT-2023-33097 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a potential use-after-free in the hix5hd2 rx function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33175 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a resource leak in the ixgbevf init module function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34336 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to a use-after-free UAF problem due to reference count races when releasing resources. The actual impact and potential for attack have not been fully determined...

PT-2023-34072 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A refcount leak of cpu ep in graph for each link was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33107 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to the af unix component in the Linux Kernel, specifically with how the user ns is obtained from in skb in the unix diag get exact function. The actual impact and...

PT-2023-14181 · WordPress · Wordpress Events Calendar

Name of the Vulnerable Software and Affected Versions: The WordPress Events Calendar WordPress plugin versions prior to 1.4.5 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because a parameter is not properly sanitized and escaped before being outputted back i...

PT-2023-14169 · WordPress · Metricool Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Metricool WordPress plugin versions prior to 1.18 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for...

PT-2023-1497 · Hitachi · Hitachi Tuning Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Tuning Manager versions prior to 8.8.5-00 Description: The issue is related to incorrect default permissions in Hitachi Tuning Manager on Linux, affecting components such as the server, and agents for RAID, NAS, and SAN Switch. This...

PT-2023-14956 · WordPress · Greenshift

Name of the Vulnerable Software and Affected Versions: Greenshift WordPress plugin versions prior to 4.8.9 Description: The issue is related to the Greenshift WordPress plugin, which does not validate and escape one of its shortcode attributes. This could allow users with a role as low as...

PT-2025-13341 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix of the instruction simulation of JALR Description: The issue is related to the instruction simulation of JALR in the Linux kernel, specifically when setting a kprobe at 'jalr 1140ra' of vfs write. This...

CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

PT-2023-16161 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...