PT-2022-34978 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak was identified in the xhci alloc stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35618 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: A potential issue exists where the hugetlb lock is not taken before decrementing h-resv huge pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-35212 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to an integer overflow in the sh css set black frame function. This problem was introduced in version v4.12 and is fixed in Linux Kernel version v5.15.77. The actual...

PT-2022-35107 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the reinjection of transport-mode packets through a workqueue in the xfrm module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

CVE-2022-38652

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent...

Intel NUC 输入验证错误漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in IntelR NUC Boards, IntelR NUC Kits versions prior to TY0070, which stems from incorrect validation of user input by the BIOS firmware. An attacker could exploit the vulnerability to escalate...

PT-2022-23938 · Intel · Intel Nuc Kit

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits versions prior to RY0386 Description: The issue is related to improper authentication in BIOS firmware, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

Intel XMM 输入验证错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in versions prior to Intel XMM 7560 Modem M27560R01.2146.00 that stems from incorrect validation of user input. An attacker could exploit the vulnerability to...

PT-2022-17603 · Intel · Intel Server Board M50Cyp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M50CYP Family versions prior to R01.01.0005 Description: The issue is related to an uncaught exception in the firmware, which may allow a privileged user to potentially enable a denial of service via local access...

PT-2022-17687 · Intel · Intel Nuc 8 Rugged Kits +3

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Rugged Boards versions prior to CHAPLCEL.0059 IntelR NUC 8 Rugged Kits versions prior to CHAPLCEL.0059 Description: The issue i...

PT-2022-27424 · Unknown · Cbrn-Analysis

Name of the Vulnerable Software and Affected Versions: CBRN-Analysis versions prior to 22 Description: The issue allows XXE attacks via an XML document, leading to NTLMv2-SSP hash disclosure. This occurs when processing a malicious XML document. Recommendations: For versions prior to 22, update t...

PT-2022-21941 · Intel · Intel Wapi Security

Name of the Vulnerable Software and Affected Versions: IntelR WAPI Security software for Windows 10/11 versions prior to 22.2150.0.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-26088

An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in PrestaShop versions prior to 2.1.3, which stems from the EU Cookie Law GDPR Banner +...

PT-2022-26444 · WordPress · Traffic Manager

Name of the Vulnerable Software and Affected Versions: Traffic Manager plugin versions prior to 1.4.6 Description: The issue is related to a Broken Access Control vulnerability that leads to Stored Cross-Site Scripting XSS in the Traffic Manager plugin on WordPress. Recommendations: For Traffic...

Ibexa GraphQL Bundle 安全漏洞

Ibexa GraphQL Bundle is an Ibexa open source GraphQL server for the eZ platform, open source Symfony CMS. A security vulnerability exists in Ibexa GraphQL Bundle versions prior to 2.3.12 and 1.0.13, which stems from the fact that its insecure storage of sensitive information results in...

PT-2022-28226 · Unknown · Readthedocs

Name of the Vulnerable Software and Affected Versions: readthedocs versions prior to 8.8.1 Description: This issue allowed a malicious user to serve arbitrary HTML files from the main application domain by exploiting a vulnerability in the code that serves downloadable content from a project...

Improper access control

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information...

Samsung Pass 授权问题漏洞

SAMSUNG Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in Samsung Pass versions prior to 4.0.05.1, which stems from incorrect access control and can be exploited by an attacker to gain...

NEC Expresscluster X 安全漏洞

NEC Expresscluster X is a specialized high availability cluster software from Nippon Electric NEC. It is used to enable fast restore functions and continuously protect critical applications and data. A security vulnerability exists in NEC Expresscluster X 5.0 for Windows and prior versions,...