PT-2023-34370 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.13 through 5.10.162 Description: A memory leak issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.13 through 5.10.162, update to versi...

PT-2023-33103 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to an out of bounds read in the mvneta config rss function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.5 and fix...

PT-2023-33533 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.17 Description: A potential issue in the Linux Kernel may cause a crash in mempool free. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2023-33548 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to the ntfs fill super function in the fs/ntfs3 module, where a GFP NOWARN allocation is used. The actual impact and attack plausibility have not yet been proven...

PT-2023-34700 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.337 Description: The issue is related to a PCI device refcount leak in the amdgpu atrm get bios function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-33205 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a bounds check in the nci struct nfc target arrays. It was introduced in version v3.4 and fixed in version v5.15.83. The actual impact and attack plausibility have not ye...

PT-2023-34438 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue exists in the Linux Kernel, where the sk error queue is not properly purged in the sk stream kill queues function. The actual impact and attack plausibility have not yet...

PT-2023-33456 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a double release compute pasid in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33661 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the return type of the netcp ndo start xmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33229 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a problem with taking the right locks for page table retraction in mm/khugepaged. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-18392 · Maho Pbx · Maho-Pbx Netdevancer Vsg Lite/Uni +2

Name of the Vulnerable Software and Affected Versions: MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud versions prior to 1.11.00 MAHO-PBX NetDevancer VSG Lite/Uni versions prior to 1.11.00 MAHO-PBX NetDevancer MobileGate Home/Office versions prior to 1.11.00 Description: The issue allows a remote...

PT-2023-33190 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.84 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the MediaTek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

PT-2023-16127 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2023-33163 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a sleep in atomic at close time in mptcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34453 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the power supply fix residue sysfs file in the error handle route of the power supply register function. The actual impact and attack plausibility have not yet been...

PT-2023-33911 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns potential name leaks in error paths. It was introduced in version v5.16 and is fixed in Linux Kernel version v6.0.16. The actual impact and attack plausibility have not ye...

PT-2023-16161 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...

CVE-2022-21191

Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the getPath function...

PT-2023-18544 · Rsshub · Rsshub

Name of the Vulnerable Software and Affected Versions: RSSHub affected versions not specified Description: RSSHub is an open source RSS feed generator that is vulnerable to Server-Side Request Forgery SSRF attacks. This issue allows an attacker to send arbitrary HTTP requests from the server to...