PT-2022-26621 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: This issue allows a user to potentially view sensitive user information due t...

Amazon Linux 2 : kernel (ALAS-2022-1903)

The version of kernel installed on the remote host is prior to 4.14.301-224.520. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1903 advisory. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is...

PT-2022-26624 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.1 Description: An out-of-bounds write issue was addressed with improved input validation, allowing an app to potentially execute arbitrary code with kernel privileges. Recommendations: For versions prior to 13.1,...

PT-2022-27992 · Sick · Sick Rfu65X

Name of the Vulnerable Software and Affected Versions: SICK RFU65x firmware versions prior to 2.21 Description: The issue is related to the use of a broken or risky cryptographic algorithm, allowing a low-privileged remote attacker to decrypt encrypted data if weak cipher suites are used for...

PT-2022-25789 · Siemens · Jt2Go +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.1.0.6 Teamcenter Visualization V13.2 versions prior to 13.2.0.12 Teamcenter Visualization V13.3 versions prior to 13.3.0.8 Teamcenter Visualization V14.0 versions prior to 14.0.0.4 Teamcenter Visualization V14.1...

CVE-2022-3591

Use After Free in GitHub repository vim/vim prior to 9.0.0789. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

Hewlett Packard Enterprise OfficeConnect 授权问题漏洞

Hewlett Packard Enterprise OfficeConnect is a family of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches, which stems from the discovery of a potential security flaw that can be...

WordPress plugin Buddybadges SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2022-25645 · WordPress · All-In-One Security

Name of the Vulnerable Software and Affected Versions: All-In-One Security AIOS WordPress plugin versions prior to 5.0.8 Description: The issue allows for IP Spoofing attacks, which can result in the bypassing of security features such as IP blocks, rate limiting, and brute force protection...

PT-2022-24882 · WordPress · Directorist

Name of the Vulnerable Software and Affected Versions: Directorist WordPress plugin versions prior to 7.4.2.2 Description: The issue allows an attacker to exploit an IDOR vulnerability, enabling them to change the password of arbitrary users instead of their own. Recommendations: For Directorist...

Nuxt.js 跨站脚本漏洞

Nuxt.js is an open source web application framework based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in versions prior to Nuxt.js v3.0.0-rc.13. An attacker exploited the vulnerability to execute a cross-site scripting attack...

CVE-2022-4408 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system from the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.9. An attacker exploited the vulnerability to perform cross-site scripting attacks...

CVE-2022-4398

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...

PT-2022-27051 · Radare2 +1 · Radare2 +1

Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.0 Description: The issue is related to an integer overflow or wraparound. Recommendations: For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue...

Amazon Linux AMI : git (ALAS-2022-1653)

The version of git installed on the remote host is prior to 2.38.1-1.77. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1653 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5,...

CVE-2022-46826

In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability...

CVE-2022-44455

The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the...

PT-2022-36023 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a use-after-free in the snd soc exit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35954 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to kprobes and ftrace. It involves skipping the clearing of aggrprobe's post handler in the kprobe-on-ftrace case. The actual impact and attack plausibility have not yet...