PT-2023-33426 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue concerns a potential skb leak in the greth init rings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-33201 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33159 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a use-after-free in the tun detach function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.17. Recommendations:...

PT-2023-33407 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue is related to the use of kzalloc in fbcon prepare logo. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to a debug object leak in the futex waitv function when kcalloc fails. This problem was introduced in version v5.16 and is fixed in version v6.0.17. The actual impact an...

PT-2023-33094 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue concerns a potential skb leak in the greth init rings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33196 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a use-after-free in the ip6 fragment function. This problem was introduced in version v4.13 and is fixed in Linux Kernel version v5.15.83. The actual impact and attack...

PT-2023-33914 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a reference count leak in the snr uncore mmio map function. It was introduced in version v5.3 and fixed in version v6.0.16. The actual impact and attack plausibility...

PT-2023-33098 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an unbalanced fwnode reference count in the mdio device release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-33458 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.19 Description: The issue concerns size validation for non-exclusive domains in the drm/amdgpu component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kerne...

PT-2023-33702 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a possible use-after-free UAF for 'bfqq-bic' in the block, bfq. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33520 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns a problem with reserved cluster accounting in the es remove extent function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linu...

PT-2023-34730 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.337 Description: A potential memory leak issue was discovered in the pmu dev alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33079 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to a potential security vulnerability in the Bluetooth L2CAP protocol, specifically an u8 overflow. The actual impact and attack plausibility have not yet been proven...

PT-2023-33145 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a PCI device refcount leak in the dmar dev scope init function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.15...

PT-2023-33968 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the pci device is present function, specifically with Virtual Functions VFs by checking the Physical Function PF. The actual impact and attack plausibility have not...

PT-2023-33617 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a use count leakage when handling boot-on, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-14958 · WordPress · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce WordPress plugin versions prior to 2.8.9 Description: The issue is related to the Welcart e-Commerce WordPress plugin, where it does not validate and escape one of its shortcode attributes. This could allow users with a rol...

PT-2023-12874 · WordPress · Wp Spell Check

Name of the Vulnerable Software and Affected Versions: WP Spell Check versions prior to 9.13 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in multisite setups...

PT-2023-6550 · WordPress · Quick Event Manager Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Quick Event Manager WordPress Plugin version prior to 9.7.5 Description: The issue is related to a reflected cross-site scripting vulnerability. It affects the category parameter of the qem ajax calendar action. This vulnerability can be...