12585 matches found
PT-2023-34967 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.10 Description: A NULL pointer issue was found in the skb segment list function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2023-35087 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the memblock free late function, where pages are not always released to the buddy allocator. This could potentially lead to security vulnerabilities, although the actu...
PT-2023-34989 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue concerns the trace printk function, which may not output as soon as it can be used. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2023-35074 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.1.5 through v6.1.7 Description: A potential NULL dereference issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v6.1.5 through...
PT-2023-35342 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue is related to a null pointer dereference when the host dies, potentially leading to a security vulnerability. The actual impact and attack plausibility have not yet been proven...
PT-2023-34929 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v6.1.10 Description: A potential double-free issue was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.5 through v6.1.10, update ...
PT-2023-34922 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue concerns the gfs2 component, specifically with how it handles inline inodes. It is noted that the actual impact and potential for attack have not been proven yet. Recommendations:...
SUSE-SU-2023:0375-1 Security update for java-1_8_0-ibm
This update for java-180-ibm fixes the following issues: IBM Security Update November 2022: bsc1205302, bsc1204703 - CVE-2022-3676: A security vulnerability was fixed in version 8.0.7.20, adding the reference here...
PT-2023-15016 · Dell · Wyse Management Suite
Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions 3.8 and below Description: The issue is related to improper access control. An authenticated malicious admin user can edit the general client policy for which the user is not authorized. Recommendations: For Wys...
JVN#60320736: NEC PC Settings Tool vulnerable to missing authentication for critical function
PC Settings Tool is an application pre-installed on computers provided by NEC by default. PC Settings Tool Library contained in the application is vulnerable to missing authentication for critical function CWE-306. Impact A general user of the computer which the affected product is installed may...
Impact of OpenSSL Vulnerabilities Advisory Released On February 7, 2023
OpenSSL has released a security advisory to address multiple vulnerabilities affecting OpenSSL versions 3.0, 1.1.1, and 1.0.2.CVE-2023-0286 - X.400 address type confusion in X.509 GeneralNameCVE-2022-4304 - Timing Oracle in RSA DecryptionCVE-2022-4203 - X.509 Name Constraints Read Buffer...
PT-2023-6770 · Open Design Alliance · Open Design Alliance Drawings Sdk
Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2023.6 Description: The issue is related to a heap-based buffer overflow in the DXF file reading procedure. This occurs due to the lack of proper validation of the length of user-supplied...
PT-2023-18199 · Samsung · Bixby Vision
Name of the Vulnerable Software and Affected Versions: Bixby Vision versions prior to 3.7.70.17 Description: The issue is related to improper input validation, which allows an attacker to access Bixby Vision data. Recommendations: For versions prior to 3.7.70.17, update to version 3.7.70.17 or...
PT-2023-18211 · Samsung · Samsung Flow For Pc
Name of the Vulnerable Software and Affected Versions: Samsung Flow for PC version 4.9.14.0 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For Samsung Flow for PC version...
PT-2023-18194 · Nfctile · Nfctile
Name of the Vulnerable Software and Affected Versions: NfcTile versions prior to SMR Jan-2023 Release 1 Description: The issue is related to improper access control, allowing an attacker to use NFC without user recognition. Recommendations: For versions prior to SMR Jan-2023 Release 1, update to...
PT-2023-18210 · Samsung · Samsung Flow
Name of the Vulnerable Software and Affected Versions: Samsung Flow for Android versions prior to 4.9.04 Description: The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. Recommendations: For versions prior...
PT-2023-19940 · Nextcloud · Nextcloud Office
Name of the Vulnerable Software and Affected Versions: Nextcloud Office versions prior to 7.0.2 Nextcloud Office versions prior to 6.3.2 Nextcloud Office versions prior to 5.0.10 Nextcloud Office versions prior to 4.2.9 Nextcloud Office versions prior to 3.8.7 Description: The Collabora integrati...
PT-2023-1845 · B&R · B&R Aprol
Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to incorrect checking of the return value of a method or function in the Tbase database server of the B&R APROL software solution for monitoring industrial systems. This c...
PT-2023-14599 · Unknown · Smartpower Web
Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue is related to an Improper Input Validation vulnerability that allows SQL Injection in Smartpower Web. This vulnerability can be exploited due to the lack of proper validation of...