PT-2022-26004 · Unknown · Diaenergie

Name of the Vulnerable Software and Affected Versions: DIAEnergie versions prior to v1.9.01.002 Description: The issue concerns a stored cross-site scripting vulnerability. This vulnerability can be exploited through the SetPF API. Recommendations: For versions prior to v1.9.01.002, update to...

PT-2022-26033 · Unknown · Diaenergie

Name of the Vulnerable Software and Affected Versions: DIAEnergie versions prior to v1.9.01.002 Description: The issue is related to a stored cross-site scripting vulnerability. This vulnerability can be exploited through the "InsertReg API". Recommendations: For versions prior to v1.9.01.002,...

PT-2022-6759 · Unknown +4 · Jupyter Core +4

Name of the Vulnerable Software and Affected Versions: Jupyter Core versions prior to 4.11.2 Description: The issue is related to arbitrary code execution in jupyter core due to the execution of untrusted files in the current working directory. This allows one user to run code as another,...

PT-2022-5270 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the /goform/form2WizardStep4 component of the D-Link DIR-816 A2 router's firmware. This can be exploited via the wizardstep4 pskpwd parameter,...

PT-2022-27029 · Delta Electronics · Diaenergy

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergy version 1.9 Description: The issue is related to a SQL Injection flaw in the HICT Loop class. This flaw could potentially allow an attacker to gain code execution on a remote system. Recommendations: For Delta...

PT-2022-20198 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An OS command injection issue exists in the web interface /action/iperf functionality. A specially-crafted HTTP request can lead to arbitrary command...

PT-2022-21455 · Unknown · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A command injection issue exists in the XCMD doDebug functionality, allowing for arbitrary command execution through a specially-crafted XCMD. This can be triggered by sending a...

PT-2022-7598

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description A flaw was found in Ansible in the amazon.aws collection when using the tower callback parameter from the amazon.aws.ec2 instance module. This issue allows an attacker to take advantage of th...

PT-2022-18525 · WordPress · Adminpad

Name of the Vulnerable Software and Affected Versions: AdminPad WordPress plugin versions prior to 2.2 Description: The issue concerns a lack of CSRF check when updating an admin's note, allowing attackers to make a logged-in admin update their notes via a CSRF attack. Recommendations: For versio...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

CVE-2022-41799

Improper access control vulnerability in GROWI prior to v5.1.4 v5 series and versions prior to v4.5.25 v4 series allows a remote authenticated attacker to bypass access restriction and download the markdown data from the pages set to private by the other users...

PT-2022-25192 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: OpenCRX versions prior to 5.2.2 Description: The issue allows an attacker to determine if a username, email, or ID is valid due to the difference in error messages received during a password reset. This is a result of password enumeration...

PT-2022-25825 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the categoriesName parameter in the "createCategories.php"...

PT-2022-26209 · Unknown · Student Result Management System

Name of the Vulnerable Software and Affected Versions: Best Student Result Management System version 1.0 Description: The issue concerns SQL Injection. It can be exploited via the "/upresult/upresult/notice-details.php?nid=" endpoint, specifically through the nid variable. Recommendations: For Be...

PT-2022-15916 · Netapp · Clustered Data Ontap

Name of the Vulnerable Software and Affected Versions: Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 Description: The issue allows an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period, specifically in configurations with...

PT-2022-13870 · Red Hat · 3Scale Api Management 2

Name of the Vulnerable Software and Affected Versions: 3scale API Management 2 Description: The issue arises from inadequate sanitation of user input in multiple fields, allowing an authenticated user to inject scripts. This could potentially lead to access to sensitive information or further...

PT-2022-26716 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak issue was discovered in the AP4 DescriptorFactory::CreateDescriptorFromStream function located in Core/Ap4DescriptorFactory.cpp. This issue is demonstrated by the mp42aac tool...

PT-2022-26909 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Custom Checkbox Parameter Plugin versions 1.4 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which can be exploited by attackers with Item/Configure permission. This occurs because the...

PT-2022-21777 · Mcafee · Mcafee Epo

Name of the Vulnerable Software and Affected Versions: McAfee ePO versions prior to 5.10 Update 14 Description: The issue allows an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack by exploiting an External XML entity XXE vulnerability. This can be done ...

PT-2022-26260 · Liferay · Liferay Portal

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.4 through 7.4.3.36 Description: A cross-site scripting issue exists in the Object module's edit object details page, allowing remote attackers to inject arbitrary web script or HTML via a crafted payload injected...