PT-2023-33312 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: A potential security issue exists due to a PCI device refcount leak in the has external pci function. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2023-34158 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential memory leak issue was identified in the tifm 7xx1 switch media function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33462 · Linux · Ksmbd

Name of the Vulnerable Software and Affected Versions: ksmbd versions prior to v6.0.19 Description: The issue is related to the ksmbd decode ntlmssp auth blob function, where the nt len is not properly checked to be at least CIFS ENCPWD SIZE. This could potentially lead to security vulnerabilitie...

PT-2023-34132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A slab-out-of-bounds read issue was discovered in the ntfs trim fs function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33694 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the zynq-ipi mailbox when the device register function fails. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2023-34174 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a WARNING in the ipr init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.86,...

PT-2023-33445 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves a null check before removing sysfs attributes, specifically related to the coretemp module. The actua...

PT-2023-34398 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to a refcount leak in the mt8173 rt5650 rt5514 dev probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-33440 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to the no-MMU ZERO PAGE implementation in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

PT-2023-33490 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A use-after-free issue was discovered in the ext4 orphan cleanup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33679 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a shift-out-of-bounds/overflow in the nilfs sb2 bad offset function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33291 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue is related to the af unix component in the Linux Kernel, specifically with how the user ns is retrieved from in skb in the unix diag get exact function. The actual impact and...

PT-2023-33382 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 5.4.225 Description: A potential socket leak was identified in the p9 socket open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34438 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue exists in the Linux Kernel, where the sk error queue is not properly purged in the sk stream kill queues function. The actual impact and attack plausibility have not yet...

PT-2023-33412 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue concerns a bounds check for sx controls in the ASoC: ops component. It was introduced in version v4.19.228 and fixed in version v4.19.268. The actual impact and attack plausibili...

PT-2023-14956 · WordPress · Greenshift

Name of the Vulnerable Software and Affected Versions: Greenshift WordPress plugin versions prior to 4.8.9 Description: The issue is related to the Greenshift WordPress plugin, which does not validate and escape one of its shortcode attributes. This could allow users with a role as low as...

PT-2023-14181 · WordPress · Wordpress Events Calendar

Name of the Vulnerable Software and Affected Versions: The WordPress Events Calendar WordPress plugin versions prior to 1.4.5 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because a parameter is not properly sanitized and escaped before being outputted back i...

PT-2023-14169 · WordPress · Metricool Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Metricool WordPress plugin versions prior to 1.18 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for...

PT-2023-1497 · Hitachi · Hitachi Tuning Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Tuning Manager versions prior to 8.8.5-00 Description: The issue is related to incorrect default permissions in Hitachi Tuning Manager on Linux, affecting components such as the server, and agents for RAID, NAS, and SAN Switch. This...

PT-2025-13341 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix of the instruction simulation of JALR Description: The issue is related to the instruction simulation of JALR in the Linux kernel, specifically when setting a kprobe at 'jalr 1140ra' of vfs write. This...