CVE-2022-1392

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

CVE-2022-1392

The CVE-2022-1392 entry concerns the WordPress plugin Videos sync PDF, version = 1.7.5 or apply the vendor patch. The connected nuclei/WP exploit references indicate a PoC exists (e.g., WPEX template "Videos sync PDF

CVE-2022-1392 Videos sync PDF <= 1.7.4 - Unauthenticated LFI

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

PT-2022-13852

Name of the Vulnerable Software and Affected Versions Videos sync PDF WordPress plugin versions 1.7.4 and earlier Description The issue arises from the plugin not validating the p parameter before using it in an include statement, potentially leading to Local File Inclusion issues. Recommendation...

WordPress plugin Videos sync PDF路径遍历漏洞

WordPress is a set of blogging platform developed using the PHP language. WordPress plugin Videos sync PDF version 1.7.4 and before there is a file inclusion vulnerability, the vulnerability stems from the plugin in the inclusion statement using the p parameter before failing to validate, an...

CVE-2022-1392: Improper Limitation of a Pathname to a Restricted Directory

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

PT-2022-30010

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30414

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a loop condition in the f2fs quota sync function. It was introduced in version v5.10.67 and fixed in version v5.10.110. The actual impact and attack plausibility have not...

PT-2022-29592

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns a loop condition in the f2fs quota sync function. It was introduced in version v5.15 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet bee...

PT-2022-30554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.148 through 5.4.188 Description The issue is related to a loop condition in the f2fs quota sync function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a loop condition in the f2fs quota sync function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-30203

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a loop condition in the f2fs quota sync function. It was introduced in version v5.15 and fixed in version v5.15.33. The actual impact and attack plausibility have not...

PT-2022-29359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a null pointer dereference on hci sync conn complete evt. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29355

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the Bluetooth functionality in the Linux Kernel, specifically with the hci sync function. It involves queuing commands when HCI UNREGISTER is set. The actual impact and...

PT-2022-30007

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29347

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-30287

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29682

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...