PT-2022-7336

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 8.5.83, 9.0.40 through 9.0.68, 10.1.0-M1 through 10.1.1 Description The issue is related to the JsonErrorReportValve in Apache Tomcat, which does not properly escape the type, message, or description values. These values...

PT-2022-26832 · Unknown · Canteen Management System

Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: A SQL injection issue was found in the Canteen Management System. The vulnerability can be exploited via the id parameter at the "/youthappam/editcategory.php" API endpoint. Recommendations:...

PT-2022-5808 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Cisco FXOS Software affected versions not specified Description: A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software cou...

PT-2022-27176 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator, which can be exploited. Recommendations: For PicoC version 3.2.2, conside...

PT-2022-5501

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description The issue is related to errors in security settings of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems. This allows a remote attacker to elevate their...

PT-2022-26861 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/php-sms/classes/Master.php?f=delete inquiry" endpoint...

PT-2022-26755 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the shareSpeed parameter in the fromSetWifiGusetBasic function. This allows for potential exploitation. Recommendations: For Tenda AC23 version 16.03.07....

PT-2022-26734 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the /operations/travellers.php component. This allows attackers to execute arbitrary code via a crafted PHP...

PT-2022-5385 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a lack of protection against SQL query structure exploitation. This can be exploited by a remote attacker to execute arbitrary SQL queries using the id...

PT-2022-26753 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the list parameter in the formSetQosBand function. Recommendations: For Tenda AC23 version 16.03.07.45 cn, consider restricting access to the...

PT-2022-26877 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 1.7.1 Description: A reflected cross-site scripting XSS issue was found in Emlog Pro at the "/admin/store.php" API endpoint. This allows for potential malicious script injection and execution. Recommendations: For Emlog Pro...

PT-2022-26543 · Salonerp · Salonerp

Name of the Vulnerable Software and Affected Versions: SalonERP version 3.0.2 Description: The issue allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the page parameter against XSS attacks. Recommendations: Fo...

PT-2022-26802 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms/admin/?page=appointments/view appointment" endpoin...

Design/Logic Flaw

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to read sensitive location information...

PT-2022-7323 · Xenstore +1 · Xenstore +1

Name of the Vulnerable Software and Affected Versions: Xenstore versions prior to the fix of XSA-322 Description: The issue allows cooperating guests to create an arbitrary number of Xenstore nodes. This is possible when one domain lets another write into its local Xenstore tree, creating many...

PT-2022-26853 · Unknown · Canteen Management System

Name of the Vulnerable Software and Affected Versions: Canteen Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/editorder.php" API endpoint. Recommendations: For Canteen Management...

PT-2022-26864 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=orders/view order" API endpoint. Recommendations: For...

PT-2022-26766 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/tests/manage test.php" API endpoint...

PT-2022-1389 · Fortinet · Fortianalyzer +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.0.0 through 7.0.4 FortiAnalyzer versions 6.0.0 through 7.0.4 Description: The issue is related to an improper neutralization of input during web page generation, which may allow a low privilege level attacker to perfor...

PT-2022-26765 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/appointments/manage appointment.php" API endpoint...