PT-2022-23318 · Akash Soni · As – Create Pinterest Pinboard Pages

Name of the Vulnerable Software and Affected Versions: Akash soni's AS – Create Pinterest Pinboard Pages plugin version 1.0 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This occurs when a subscriber or higher can change plugin...

PT-2022-4433 · WordPress · Yotuwp Video Gallery

Name of the Vulnerable Software and Affected Versions: yotuwp Video Gallery plugin versions 1.3.4.5 and earlier Description: The issue is related to a Broken Authentication vulnerability in the yotuwp Video Gallery plugin for WordPress. This vulnerability is associated with weaknesses in the...

PT-2022-15062 · WordPress · Linkworth

Name of the Vulnerable Software and Affected Versions: LinkWorth WordPress plugin versions prior to 3.3.4 Description: The issue is related to the lack of nonce checks in the LinkWorth WordPress plugin, which could allow attackers to perform a CSRF attack. This attack could enable an attacker to...

PT-2025-25928

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc5 for upstream min debug 2022 05 05 10 13 Description The issue is related to an asymmetry in setting and clearing the MLX5 LAG FLAG NDEVS READY flag in the Linux kernel's net/mlx5 module. This can lead ...

PT-2022-21710 · Unknown +1 · Wwbn Avideo +1

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 Description: A SQL injection issue exists in the ObjectYPT functionality, specifically within the Live Schedules plugin. This allows an attacker to inject SQL by manipulating the title parameter in a specially-crafte...

PT-2022-20631 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.2.0 through 9.2.1.12 Dell PowerScale OneFS version 9.3.0.5 Description: The issue is related to an improper preservation of permissions in SyncIQ, which could allow a low-privileged local attacker to potential...

PT-2022-15655 · WordPress · Wp Edit Menu

Name of the Vulnerable Software and Affected Versions: WP Edit Menu WordPress plugin versions prior to 1.5.0 Description: The issue concerns a lack of CSRF protection in an AJAX action, which could allow attackers to make a logged-in admin delete arbitrary posts or pages from the blog via a CSRF...

CVE-2022-37060

FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains directory traversal characters to disclose the contents of files...

CVE-2022-37062

The CVE-2022-37062 issue affects Teledyne FLIR AX8 thermal sensor cameras version up to and including 1.46.16, due to an insecure design from improper directory access restriction that allows an unauthenticated remote attacker to request a URI containing the path to the SQLite users database and ...

PT-2022-22631 · Vitejs · Vite

Name of the Vulnerable Software and Affected Versions: Vitejs Vite versions prior to 2.9.13 Description: The issue allows attackers to perform a directory traversal via a crafted URL to the victim's service. This can be achieved by sending a specifically designed URL to the victim's service,...

PT-2022-9949 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: HestiaCP versions prior to 1.3.5 Description: A cross-site scripting XSS issue in the "/admin/list key.html" endpoint allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For versions prior to 1.3....

PT-2022-23586 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: A SQL injection issue was found in the Library Management System via the bookId parameter at the "/staff/delete.php" API endpoint. Recommendations: For Library Management System version 1.0,...

PT-2022-17167 · Candidats · Candidats

Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Beta Description: The issue allows an authenticated user to inject SQL queries through specific API endpoints, including '/index.php?m=settings&a=show' via the userID parameter, '/index.php?m=candidates&a=show' via the...

CVE-2022-37060

The CVE-2022-37060 entry relates to Teledyne FLIR AX8 thermal sensor cameras affected up to firmware version 1.46.16. A directory traversal flaw arises from improper access restrictions, allowing an unauthenticated, remote attacker to disclose files outside the restricted server path by sending c...

CVE-2022-37060

FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains directory traversal characters to disclose the contents of files...

PT-2022-22633 · Unknown · Ecommerce-Codeigniter-Bootstrap

Name of the Vulnerable Software and Affected Versions: Ecommerce-CodeIgniter-Bootstrap versions before commit 56465f Description: A cross-site scripting XSS issue was found in the function base url at the /blog/blogpublish.php endpoint. This allows for potential exploitation. Recommendations: For...

PT-2022-23585 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the M Id parameter at the "/student/dele.php" API endpoint. Recommendations: For Library...

PT-2022-22919 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in CustomerDAO.java allows attackers to execute arbitrary SQL commands via the searchTxt parameter. This enables unauthorized access and manipulation of databas...

PT-2022-10857 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.5 IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.0.4 IBM Sterling B2B Integrator Standard Edition versions 6.1.1.0 through 6.1.1.1...

PT-2022-22647 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions 7.23 and earlier SolarView Compact SV-CPT-MC310F versions 7.23 and earlier Description: The image file management page contains an insufficient verification issue when uploading files. This can be...