PT-2022-23555 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/admin/?page=reports/stockout&month=" endpoint...

PT-2022-23469 · Seiko · Seiko Skybridge Mb-A200

Name of the Vulnerable Software and Affected Versions: Seiko SkyBridge MB-A200 versions 01.00.04 and below Description: The issue concerns multiple hard-coded passcodes for root access. Attackers can obtain these passcodes from /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh...

PT-2022-4623 · Centrecom · Centrecom Ar260S V2

Name of the Vulnerable Software and Affected Versions: CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 Description: The issue is related to an undocumented hidden command that can be executed from the telnet function, allowing a remote authenticated attacker to execute an arbitrary OS...

PT-2022-23558 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=user/manage user&id=" endpoint. Recommendations:...

PT-2022-23570 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Id parameter at the "/stocks/manage waste.php" API endpoint. Recommendations: For...

PT-2022-23479 · Sinsiu · Sinsiu Enterprise Website System

Name of the Vulnerable Software and Affected Versions: Sinsiu Sinsiu Enterprise Website System version 1.1.1.0 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the component /upload/admin.php?/deal/. Recommendations: For Sinsiu Sinsiu...

Ubuntu: Security Advisory (USN-5465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-23388 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered, which occurs via the pppoeUser parameter. Recommendations: For TOTOLINK A3700R version 9.1.2u.6134 B20201202, as a temporary workaround, conside...

PT-2022-24086 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered in the function formWifiWpsOOB, specifically via the index parameter. Recommendations: For version 15.03.06.23, consider restricting access to the...

PT-2022-23432 · H3C · H3C Gr-2200

Name of the Vulnerable Software and Affected Versions: H3C GR2200 MiniGR1A0V100R014 Description: A command injection issue was discovered, which can be exploited via the param parameter at the DelL2tpLNSList endpoint. Recommendations: For H3C GR2200 MiniGR1A0V100R014, consider restricting access ...

PT-2022-23431 · H3C · H3C Gr-3200

Name of the Vulnerable Software and Affected Versions: H3C GR3200 MiniGR1B0V100R014 Description: A command injection issue was discovered via the param parameter at DelL2tpLNSList. Recommendations: For H3C GR3200 MiniGR1B0V100R014, consider restricting access to the DelL2tpLNSList to minimize the...

PT-2022-23382 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A command injection issue was found via the host time parameter in the NTPSyncWithHost function. This allows for potential exploitation. Recommendations: For TOTOLINK A3700R version...

PT-2022-23385 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setLanguageCfg function via the lang parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the lang parameter in the...

PT-2022-23207 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: The issue allows a domain authenticated user to send a crafted message to the Blue Prism Server in a misconfigured environment, potentially leading to remote code execution due to...

PT-2022-24089 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the startIp parameter in the formSetPPTPServer function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider restricting access to the...

PT-2022-24096 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A stack overflow issue was discovered via the list parameter at the formSetQosBand function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider restricting access to the formSetQosBand functi...

PT-2022-23579 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/changestock.php" API endpoint. Recommendations: For Library...

PT-2022-24082 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the time parameter in the saveParentControlInfo function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider restricting access to the...

PT-2022-4454 · Unknown · Workstation

Name of the Vulnerable Software and Affected Versions: WorkstationST versions prior to 07.09.15 Description: A reflected cross-site scripting XSS vulnerability exists in the iHistorian Data Display of WorkstationST, which could allow an attacker to compromise a victim's browser. The vulnerability...

PT-2022-6883 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.38 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can allow an attacker to gain unauthorized access to protected information...