PT-2023-35313 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically the pn533 driver. It involves waiting for out urb's completion. The actual impact...

PT-2023-35048 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.1.7 Description: A use-after-free and race condition issue was discovered in the fastrpc map find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-19788 · Owncloud · Owncloud Android App

Name of the Vulnerable Software and Affected Versions: ownCloud Android app versions prior to 3.0 Description: The ownCloud Android app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. These bypasses may lead to information disclosure when uploading the...

PT-2023-15995 · WordPress · Customer Reviews For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customer Reviews for WooCommerce WordPress plugin versions prior to 5.16.0 Description: The issue allows users with a contributor role and above to include arbitrary files via a traversal attack due to a lack of validation in one of its...

PT-2023-14755 · WordPress · Twenty20 Image Before-After

Name of the Vulnerable Software and Affected Versions: Twenty20 Image Before-After WordPress plugin versions 1.5.9 and earlier Description: The issue concerns the Twenty20 Image Before-After WordPress plugin, which does not properly validate and escape some of its shortcode attributes before...

PT-2023-34947 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a use-after-free UAF error during the login process when accessing the shost ip address in the iscsi tcp module of the Linux Kernel. The actual impact and attack...

PT-2023-35126 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.92 Description: The issue is related to an incorrect offset calculation in the erofs/zmap.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

PT-2023-35173 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to a potential NULL pointer dereference in the ncm bitrate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-35008 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0 through v6.1.8 Description: A memory leak issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v6.0 through v6.1.8, update to...

PT-2023-35117 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: A harden sanity check issue in squashfs read xattr id table was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-35268 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: A potential security issue exists due to a pci device refcount leak in the ixgbe module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2023-16121 · WordPress · Wp Tripadvisor Review Slider

Name of the Vulnerable Software and Affected Versions: WP TripAdvisor Review Slider WordPress plugin versions prior to 10.8 Description: The issue arises from improper sanitization and escaping of a parameter before its use in a SQL statement, resulting in a SQL injection that can be exploited by...

PT-2023-35096 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to a use-after-free UAF vulnerability in the drm/virtio component. It was introduced in version v4.4 and fixed in version v6.1.7. The actual impact and attack plausibilit...

OESA-2023-1066 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

PT-2023-18215 · Samsung · Samsung Cloud

Name of the Vulnerable Software and Affected Versions: Samsung Cloud versions prior to 5.3.0.32 Description: A path traversal issue exists, allowing an attacker to access a specific png file. Recommendations: For versions prior to 5.3.0.32, update to version 5.3.0.32 or later to resolve the issue...

CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

PT-2023-14595 · Unknown · Smartpower Web

Name of the Vulnerable Software and Affected Versions: Smartpower Web versions prior to 23.01.01 Description: The issue affects Smartpower Web, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables attackers to inject malicious scripts...

PT-2023-20046 · Caphyon · Caphyon Advanced Installer

Name of the Vulnerable Software and Affected Versions: Caphyon Advanced Installer versions 20.0 and below Description: The issue concerns a privilege escalation in the MSI repair functionality, allowing attackers to access and manipulate system files. Recommendations: For versions 20.0 and below,...

PT-2023-1580 · Dell · Dell Command | Intel Vpro Out Of Band

Name of the Vulnerable Software and Affected Versions: Dell Command Intel vPro Out of Band versions prior to 4.3.1 Description: The issue is related to an Improper Authorization vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to write arbitrary...

PT-2023-12957 · Caddy · Caddy

Name of the Vulnerable Software and Affected Versions: Caddy version 2.4.6 Description: The issue allows attackers to redirect users to phishing websites via crafted URLs due to improper request sanitization. A crafted URL can cause the static file handler to redirect to an attacker-chosen URL,...