GSD-2023-1001228 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000857 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

GSD-2023-1000474 fs/ntfs3: Validate index root when initialize NTFS security

fs/ntfs3: Validate index root when initialize NTFS security This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000439 ext4: don't set up encryption key during jbd2 transaction

ext4: don't set up encryption key during jbd2 transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000387 drm/amdkfd: Fix kernel warning during topology setup

drm/amdkfd: Fix kernel warning during topology setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000199 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...

GSD-2023-1000111 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

PT-2023-34052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A memory leak issue was discovered in the st of quadfs setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33275 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.161 Description: The issue is related to the initialization of mailbox messages for VF reset. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33113 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A memory leak issue was discovered in the gpiochip setup dev function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34389

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue was discovered in the st of quadfs setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19 Description The issue arises when the early init dt scan memory function fails, leading to the execution of of/fdt: run soc memory setup. This could potentially have security implications, although the...

OOPSpam Anti-Spam < 1.1.36 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

PT-2023-1180 · Oracle · Oracle Learning Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Setup component of the Oracle Learning Management product. This can be exploited by a remote attacker to...

PT-2023-33612

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A memory leak issue was discovered in the st of quadfs setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2023-21852: Improper Access Control

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: Setup. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Learning Management...

PT-2023-34733

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a buffer overflow in the setup handler of the uvc gadget in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2023-34624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A memory leak issue was discovered in the st of quadfs setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2022-4199

The Link Library WordPress plugin before 7.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Cross site scripting

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...