PT-2022-25762 · Jenkins · Jenkins Bigpanda Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins BigPanda Notifier Plugin versions 1.4.0 and earlier Description: The issue concerns the storage of the BigPanda API key in an unencrypted form within the global configuration file on the Jenkins controller. This file can be accessed b...

PT-2022-25359 · Z Blogphp · Z-Blogphp

Name of the Vulnerable Software and Affected Versions: Z-BlogPHP versions prior to 1.7.3 Description: A security issue was discovered that allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the source parameter, due to a Server-Side...

PT-2022-21129 · Cloudreve · Cloudreve

Name of the Vulnerable Software and Affected Versions: Cloudreve versions v1.0.0 through v3.5.3 Description: The issue is related to Stored Cross-Site Scripting XSS via the file upload functionality. A low-privileged user can share a file with an admin user, potentially leading to privilege...

PT-2022-22548 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6e41b0 endpoint. Recommendations: For OTFCC commit 617837b, as a temporary workaround, consider...

PT-2022-24484 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: A SQL injection issue was found in SmartVista SVFE2, specifically via the voiceAudit:j id97 parameter at the "/SVFE2/pages/audit/voiceaudit.jsf" endpoint. This allows for potential exploitation...

PT-2022-25183 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability via the /bin/httpd endpoint, specifically in the fromSetSysTime function. Recommendations: For Tenda AC21 version 16.03.08.15, as a temporary...

PT-2022-25186 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can occur via the /bin/httpd, specifically in the function: setSmartPowerManagement. Recommendations: For Tenda AC21 version 16.03.08.15, consider...

PT-2022-25536 · Opswat · Opswat Metadefender Icap Server

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender ICAP Server versions prior to 4.13.0 Description: A stored Cross-Site Scripting XSS issue allows attackers to execute arbitrary JavaScript or HTML due to the blocked page response. This enables attackers to potentially...

PT-2022-22545 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x4adcdb endpoint in the asan memset function. Recommendations: For OTFCC commit 617837b, consider...

PT-2022-22546 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the "/release-x64/otfccdump+0x65f724" endpoint. This issue affects the specified commit. Recommendations: For OTFCC commit 617837b, consider...

PT-2022-22550 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6b544e endpoint. This issue can be exploited, potentially leading to security breaches. Recommendation...

PT-2022-22541 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6c0a32 endpoint. Recommendations: For OTFCC commit 617837b, as a temporary workaround, consider restricting acces...

PT-2022-24382 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar aka Bio Star 2 version 2.8.16 Description: A vulnerability in the software allows attackers to escalate privileges to System Administrator via a crafted PUT request to the "update profile page" API endpoint. This issue enables...

PT-2022-24431 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking id parameter at the "/admin/budget.php" API endpoint. Recommendations: For Wedding Planner...

PT-2022-25488 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350OMS version R14.2 Description: A reflected XSS issue was discovered, affecting various "/cgi-bin/R14.2" API endpoints. Recommendations: For NOKIA 1350OMS version R14.2, consider restricting access to the affected "/cgi-bin/R14.2" AP...

PT-2022-22547 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC, specifically in commit 617837b, via the /release-x64/otfccdump+0x6e41b8 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting...

PT-2022-25526 · Modern Campus · Modern Campus - Omni Cms

Name of the Vulnerable Software and Affected Versions: Modern Campus Omni CMS formerly OU Campus version 10.2.4 Description: The issue allows for SQL injection via a specific substring on the login page. This can be achieved by using a substring such as ' OR 1 = 1 -- - , ?php'. Recommendations: F...

PT-2022-34086 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A refcount leak was found in the setup msi msg address function. The issue was introduced in version v2.6.23 and is fixed in Linux Kernel version v5.10.137. The actual impact and attack...

PT-2022-34047 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A buffer overflow issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33788 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to an error handling path in the meson mmc probe function. It was introduced in version v4.18 and fixed in Linux Kernel version v5.15.63. The actual impact and attack...