CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

PT-2022-12897 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to 756 Description: A XSS issue exists that allows an attacker to execute javascript code via the event filter name field. Recommendations: For versions prior to 756, update to a version above 756 to resolve the iss...

Amazon Linux AMI : kernel (ALAS-2022-1624)

The version of kernel installed on the remote host is prior to 4.14.287-148.504. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1624 advisory. There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow...

PT-2022-21840 · Unknown · Bluetoothscandialog

Name of the Vulnerable Software and Affected Versions: BluetoothScanDialog versions prior to SMR Aug-2022 Release 1 Description: A vulnerable code in the onCreate method of BluetoothScanDialog allows attackers to trick the user into selecting an unwanted Bluetooth device via tapjacking/overlay...

PT-2022-21844 · Unknown · Secdevicepickerdialog

Name of the Vulnerable Software and Affected Versions: SecDevicePickerDialog versions prior to SMR Aug-2022 Release 1 Description: A vulnerable code in the onCreate method of SecDevicePickerDialog allows attackers to trick the user into selecting an unwanted Bluetooth device via tapjacking or...

PT-2022-12898 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to 756 Description: A XSS issue exists that allows an attacker to execute javascript code via the service name field. Recommendations: For versions prior to 756, update to a version above 756 to resolve the issue...

PT-2022-23642 · Samsung · Galaxy Wearable

Name of the Vulnerable Software and Affected Versions: Galaxy Wearable versions prior to 2.2.50 Description: The issue allows an attacker to obtain sensitive information through an Implicit Intent hijacking vulnerability. Recommendations: For Galaxy Wearable versions prior to 2.2.50, update to...

CVE-2022-2651

Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5...

CVE-2022-2651 Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5...

F5 Networks BIG-IP : iControl REST vulnerability (K55580033)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.1 / 15.1.6.1 / 16.1.3.1 / 17.0.0.1 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K55580033 advisory. - In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before...

CVE-2022-31251

A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3...

PT-2022-16238 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.6 Description: A stored XSS issue was identified, allowing the injection of arbitrary attributes, which was blocked by GitHub's Content Security Policy CSP. This issue was reported via the GitHub B...

CVE-2022-2580

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...

CVE-2022-2598

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100...

CVE-2022-2581

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104...

CVE-2022-2589

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

AZL-10446 CVE-2022-2581 affecting package vim for versions less than 9.0.0325-1

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104...

CVE-2022-2581

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104...

CVE-2022-2589

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...

PT-2022-13293 · WordPress · Login With Phone Number

Name of the Vulnerable Software and Affected Versions: Login with phone number WordPress plugin versions prior to 1.3.8 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks due to the plugin's failure to sanitise and escape its settings, even when the...