PT-2023-34825 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the btrfs function run one delayed ref, which always reports an error. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34898 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: A potential NULL pointer dereference issue exists in the ncm bitrate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2023-34739 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.0 through v6.1.7 Description: A null-deref issue was found in the gsmi get variable function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.0 through...

PT-2023-34782 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.9 through v6.1.6 Description: The issue is related to the arch scale freq tick function on tickless systems. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2023-34851 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A potential issue exists due to a race between quota rescan and disable, leading to a NULL pointer dereference. The actual impact and attack plausibility have not yet been proven...

CVE-2022-46998

An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery SSRF...

PT-2023-14705 · Hundredrabbits · Hundredrabbits Left

Name of the Vulnerable Software and Affected Versions: Hundredrabbits Left version 7.1.5 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary code via file names. Recommendations: For version 7.1.5, update to a newer version that contains a fix for this issue...

PT-2023-33092 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue concerns a use-after-free in the ip6 fragment function, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-33320 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a null pointer check in the coretemp hwmon driver. It was introduced in version v3.0 and fixed in version v5.10.158. The actual impact and attack plausibility have...

PT-2023-33271 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.161 Description: The issue is related to a potential security vulnerability in the Bluetooth L2CAP protocol, specifically an u8 overflow. The actual impact and attack plausibility have not yet been proven...

PT-2023-33224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a possible use-after-free in the memcg write event control function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.14 Description: The issue concerns an event handler registration ordering problem in the Linux Kernel's rtc: cmos component. The actual impact and potential for attack have not been proven yet...

PT-2023-34399 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue exists where the media: dvbdev: adopts refcnt to avoid UAF. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33510 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a use-after-free UAF problem due to reference count races when releasing resources. The actual impact and potential for attack have not been fully determined...

PT-2023-33318 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns the removal of used dynamic events, which may lead to the freeing of buffers. This could potentially have security implications, although the actual impact and attack...

PT-2023-33181 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue concerns the removal of direct runtime PM calls in the Linux Kernel. It was introduced in version v5.16 and fixed in version v6.0.12. The actual impact and attack plausibility have...

PT-2023-33969 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to a problem with GEM handle creation ref-counting in the drm/panfrost component. The actual impact and potential for attack have not been proven yet. Recommendations:...

PT-2023-11729 · Hewlett Packard · Hpe

Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details about this issue are available via the National Vulnerability Database...

PT-2023-14501 · Hewlett Packard · Hpe

Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...

PT-2023-11384 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue was previously assigned a CVE identifier, but it was unused by HPE. The information is available via the National Vulnerability Database. Recommendations: At the moment, there...