PT-2022-24623 · Pbc · Pbc

Name of the Vulnerable Software and Affected Versions: PBC through 2022-8-27 Description: A SEGV issue was detected in the function pbc wmessage integer in src/wmessage.c:137. This issue affects PBC. Recommendations: For PBC through 2022-8-27, as a temporary workaround, consider disabling the pbc...

PT-2022-24465 · 10 Strike · 10-Strike Network Inventory Explorer

Name of the Vulnerable Software and Affected Versions: 10-Strike Network Inventory Explorer version 9.3 Description: A buffer overflow issue was discovered in the Add Computers function of the software. Recommendations: For version 9.3, consider disabling the Add Computers function until a patch ...

PT-2022-25534 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: An issue was discovered in Bento4, where a NULL pointer dereference occurs in the AP4 StszAtom::WriteFields function. Recommendations: For Bento4 versions 1.6.0-639 and earlier, as a temporar...

PT-2022-7420 · Mplayer +4 · Mplayer +4

Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the gen sh video function in mplayer/libmpdemux/demux mov.c. This can potentially allow an attacker to cause a...

PT-2022-7411 · Unknown +3 · Libmpdemux +3

Name of the Vulnerable Software and Affected Versions: mplayer version SVN-r38374-13.0.1 mencoder version SVN-r38374-13.0.1 Description: The issue is related to a buffer overflow vulnerability via the asf init audio stream function in the libmpdemux/asfheader.c file. This can lead to a denial of...

PT-2022-7415 · Unknown +5 · Libmpdemux +5

Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Divide By Zero vulnerability via the demux avi read packet function in libmpdemux/demux avi.c. This vulnerability may allow an...

PT-2022-8058 · Smarty +2 · Smarty +2

Name of the Vulnerable Software and Affected Versions: Smarty versions prior to 3.1.47 Smarty versions 4.x prior to 4.2.1 Description: The issue allows cross-site scripting XSS in the libs/plugins/function.mailto.php file. A web page using smarty function mailto and parameterized with GET or POST...

PT-2022-23667 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so library versions prior to SMR Sep-2022 Release 1 Description: A heap-based overflow vulnerability in the GetCorrectDbLanguageTypeEsPKc function allows an attacker to cause a memory access fault...

PT-2022-17601 · Google · Jib-Core

Name of the Vulnerable Software and Affected Versions: com.google.cloud.tools:jib-core versions prior to 0.22.0 Description: The issue allows for Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input. Recommendations: For versions prior to 0.22.0, update...

PT-2022-23488 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE Description: The issue is caused by a buffer overflow in the getsinglepppuser function due to sscanf. Recommendations: For Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE, as a temporary...

PT-2022-23527 · Unknown · Pkuvcl Davs2

Name of the Vulnerable Software and Affected Versions: PKUVCL davs2 version 1.6.205 Description: A global buffer overflow was discovered in the parse sequence header function at source/common/header.cc:269. This issue affects the specified version of PKUVCL davs2. Recommendations: For PKUVCL davs...

PT-2022-17431 · Npm · @Pendo324/Get-Process-By-Name

Name of the Vulnerable Software and Affected Versions: @pendo324/get-process-by-name versions all Description: The issue is related to Arbitrary Code Execution due to improper sanitization of the getProcessByName function. This allows for potential code execution without proper validation...

PT-2022-24452 · Linksys · Linksys E1200

Name of the Vulnerable Software and Affected Versions: Linksys E1200 version 1.0.04 Description: The issue is related to a buffer overflow vulnerability. It can be triggered via the ej get web page name function. Recommendations: For Linksys E1200 version 1.0.04, as a temporary workaround, consid...

PT-2022-24456 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A heap buffer overflow issue was found in the formSetFixTools function, allowing attackers to cause a Denial of Service DoS by exploiting the lan parameter. Recommendations: For Tenda M3 version...

PT-2022-24464 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A buffer overflow was discovered in the function formSetGuideListItem. Recommendations: For Tenda M3 version 1.0.0.124856, consider disabling the formSetGuideListItem function until a patch is...

PT-2022-24457 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A heap buffer overflow issue was found in the function formSetFixTools, allowing attackers to cause a Denial of Service DoS via the MACAddr parameter. Recommendations: For Tenda M3 version...

PT-2022-24084 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the page parameter in the fromDhcpListClient function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider disabling the fromDhcpListClient...

PT-2022-23416 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function edditactionlist. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, as a temporary workaround, consider disabling the...

PT-2022-23413 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function UpdateIpv6Params. Recommendations: For version NX18PV100R003, consider disabling the UpdateIpv6Params function as a temporary...

PT-2022-23808 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetAPWifiorLedInfoById. Recommendations: For H3C H200 version H200V100R004, consider disabling the SetAPWifiorLedInfoById function as a temporar...