GSD-2023-1002057 ipv4: prevent potential spectre v1 gadget in fib_metrics_match()

ipv4: prevent potential spectre v1 gadget in fibmetricsmatch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1001900 ipv4: prevent potential spectre v1 gadget in fib_metrics_match()

ipv4: prevent potential spectre v1 gadget in fibmetricsmatch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

PT-2023-35217 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.166 Description: The issue concerns a potential Spectre v1 gadget in the ip metrics convert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description The issue concerns a potential Spectre v1 gadget in the netlink component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.15 and fixed ...

PT-2023-35324

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.272 Description The issue concerns a potential Spectre v1 gadget in the ip metrics convert function. This could potentially be exploited, although the actual impact and attack plausibility have not yet been...

PT-2023-35133 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue concerns a potential Spectre v1 gadget in the fib metrics match function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35279

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue concerns a potential Spectre v1 gadget in the fib metrics match function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2023-35216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description The issue concerns a potential Spectre v1 gadget in the fib metrics match function. This could potentially be exploited, although the actual impact and attack plausibility have not yet been...

PT-2023-35134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue concerns a potential Spectre v1 gadget in the ip metrics convert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-35280

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue concerns a potential Spectre v1 gadget in the ip metrics convert function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-35282 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.231 Description: The issue is related to potential Spectre v1 gadgets in netlink. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

CVE-2023-24231

CVE-2023-24231 : A stored cross-site scripting (XSS) vulnerability exists in the Inventory Management System v1, specifically in the component at /php-inventory-management-system/categories.php. The issue arises when a crafted payload is injected into the Categories Name parameter, allowing an at...

PT-2023-15553

Name of the Vulnerable Software and Affected Versions Zammad version 5.3.0 Description An issue in the component "/api/v1/mentions" allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see. Recommendations For Zammad version 5.3.0,...

CVE-2022-48022

An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see...

CVE-2022-48022: Undefined Security Weakness

An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see...

CVE-2022-45172: Incorrect Authorization

An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected ...

CVE-2022-41505

An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value...

CVE-2022-41505

The CVE-2022-41505 entry concerns the TP-Link Tapo C200 V1 webcam, where an access-control flaw reportedly lets a physically proximate attacker obtain root access by connecting to UART pins, interrupting boot, and setting init=/bin/sh. Documents confirm physical access as the attack vector and th...

CVE-2022-41505

An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value...

PT-2023-9763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential Spectre v1 gadget in the xfrm xlate32 attr function. This could allow an attacker to leak kernel memory content to malicious users. The vulnerability ...