PT-2023-34836 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to an overflow before widen in the bitmap ip create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34749 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns a qgroup record without old roots populated in btrfs, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2023-34799 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the interrupt is not for an auxiliary transfer. This could potentially lead to security...

PT-2023-34848 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.0 through 5.10.164 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.0 through...

PT-2023-34765 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the Bluetooth driver shutdown on closed serdev. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34750 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A null pointer dereference issue occurs when the host dies, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2023-34760 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: A memory leak was discovered in the do mmap error path. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.1.8, update ...

PT-2023-34850 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: The issue is related to a slab-out-of-bounds error on the RX FIFO buffer in the qcom-geni-serial driver. This problem was introduced in version v5.7 and is fixed in version v5.10.165. The...

PT-2023-34877 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: A potential NULL pointer dereference issue exists in the ncm bitrate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-34865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the regulator, specifically the da9211, and its use of an irq handler when ready. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2023-34849 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A race condition exists between mounting and unmounting in the gadgetfs of the USB subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34763 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-34776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.1.6 Description: The issue is related to a potential security vulnerability in the net/mlx5 module. It involves fixing command stats access after free, which may have security implications. The actual...

PT-2023-34813 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the btrfs file system, where a failure to write the log tree when syncing the log does not abort the transaction. This could potentially lead to security...

PT-2023-15991 · WordPress · Wp Social Widget

Name of the Vulnerable Software and Affected Versions: WP Social Widget versions prior to 2.2.4 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode attributes...

PT-2023-19709 · Pdfbook · Pdfbook

Name of the Vulnerable Software and Affected Versions: PdfBook extension versions 2.0.5 and earlier Description: The issue allows command injection via an option. Recommendations: For PdfBook extension versions 2.0.5 and earlier, update to a version after b07b6a64 to resolve the issue...

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

SUSE-SU-2023:0169-1 Security update for xen

This update for xen fixes the following issues: - CVE-2022-23824: Fixed multiple speculative execution issues bnc1205209. Non-security fixes: - Updated to version 4.16.3 bsc1027519...

PT-2023-1816 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to a use-after-free condition when handling USDZ files, potentially allowing an attacker to access sensitive information using a specially crafted USDZ file. This...

PT-2023-13650 · Netiq · Netiq Imanager

Name of the Vulnerable Software and Affected Versions: NetIQ iManager versions prior to 3.2.6 Description: A Cross-site Scripting XSS issue allows an attacker to execute malicious scripts on the user's browser. Recommendations: For versions prior to 3.2.6, update to version 3.2.6 or later to...