PT-2022-33321 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A null pointer dereference issue was discovered in the f2fs get dnode of data function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33536 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the use of an uninitialized variable in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-23894 · Craft Cms · Craft Cms

Name of the Vulnerable Software and Affected Versions: Craft CMS version 4.2.0.1 Description: The issue is related to Stored Cross Site Scripting XSS in the "/admin/myaccount" API endpoint. This allows for malicious scripts to be stored and executed on the platform. Recommendations: For Craft CMS...

PT-2022-24592 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/activity/admin/modules/modstudent/index.php?view=view&id=" endpoint. The id variable is vulnerable ...

PT-2022-24585 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue is related to a Buffer Overflow via the cstecgi.cgi endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affect...

PT-2022-33550 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.19.1 Description: A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.3 through...

PT-2022-19966 · Milesight · Milesight Video Management Systems

Name of the Vulnerable Software and Affected Versions: Milesight Video Management Systems VMS versions prior to 40.7.0.79-r1 Description: The issue is caused by improper input handling at the camera's web-based management interface. A remote attacker could exploit this by sending a specially...

PT-2022-23898 · Stealjs · Stealjs

Name of the Vulnerable Software and Affected Versions: stealjs steal version 2.2.4 Description: The issue is related to a prototype pollution vulnerability in the convertLater function in npm-convert.js. This vulnerability is exploited via the requestedVersion variable in npm-convert.js...

PT-2022-24367 · Unknown · Event Management System

Name of the Vulnerable Software and Affected Versions: Event Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /Royal Event/update image.php component. Recommendations: F...

PT-2022-16828 · Ezviz · Ezviz Cs-C6N-A0-1C2Wfr-Mul

Name of the Vulnerable Software and Affected Versions: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428 Description: The issue is related to an Improper Initialization vulnerability in the local server component, allowing a local attacker to read the contents of the memory space...

PT-2022-24472 · Unknown · Church Management System

Name of the Vulnerable Software and Affected Versions: Church Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/edit visitor.php" API endpoint. Recommendations: For Church...

PT-2022-20899 · Unknown · Openam Consortium Edition

Name of the Vulnerable Software and Affected Versions: OpenAM Consortium Edition version 14.0.0 Description: The issue allows an open redirect when accessing an affected server through a specially crafted URL, potentially redirecting the user to an arbitrary website. Recommendations: For OpenAM...

PT-2022-5018 · WordPress · Wp 2Fa

Name of the Vulnerable Software and Affected Versions: WP 2FA WordPress plugin versions prior to 2.3.0 Description: The issue exists due to the use of comparison operators that do not mitigate time-based attacks, potentially allowing a remote attacker to leak information about authentication code...

PT-2022-5136 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS version 2205 Description: The issue is related to the use of a regular expression with inefficient computational complexity in the UI of Dell Wyse ThinOS. This could allow a remote attacker to cause a denial-of-service. An...

PT-2022-24670 · Sap · Sap Businessobjects Business Intelligence Platform Central Management Console

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Central Management Console CMC version 430 Description: The issue allows an attacker to access certain unencrypted sensitive parameters under certain conditions, which would otherwise be...

PT-2022-24445 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery versions 1.7.5 through 1.8.5 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the where parameter at the "/archive/apply" API endpoint. Recommendations: For versions 1.7.5...

PT-2022-5073 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS version 9.1.0 Description: The issue is related to the use of unsafe string functions to process user input in several commands, which can lead to stack-based buffer overflows. This...

PT-2022-25015 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem. This issue occurs under the /usr/Systems/OTNE 1 14...

PT-2022-20686 · Penta Security Systems Inc · Wapples

Name of the Vulnerable Software and Affected Versions: Penta Security Systems Inc WAPPLES version 6.0 r3 4.10-hotfix1 Description: The issue allows attackers to escalate privileges via overwriting files using SUID flagged executables. Recommendations: For Penta Security Systems Inc WAPPLES versio...

PT-2022-5781 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to the...