PT-2022-22011 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: Dataease version 1.11.1 Description: An issue in the component "/api/plugin/upload" of Dataease allows attackers to execute arbitrary code via a crafted plugin. Recommendations: For Dataease version 1.11.1, update to version 1.11.2 to resolve...

PT-2022-22013 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase version 1.11.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the parameter dataSourceId. There is no information about the estimated number of potentially affected devices worldwide or real-world...

PT-2022-22197 · Digital Watchdog · Dw Megapix Ip Cameras

Name of the Vulnerable Software and Affected Versions: Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description: A command injection issue was found in the /admin/vca/bia/addacph.cgi component. This issue can be exploited through a crafted POST request. Recommendations: For...

PT-2022-18401 · Shanghai Feixun Data Communication Technology Co. · Fir302B

Name of the Vulnerable Software and Affected Versions: Shanghai Feixun Data Communication Technology Co., Ltd router fir302b version A2 Description: The issue is related to a remote command execution vulnerability via the Ping function. This allows for potential unauthorized access and control...

PT-2022-14189 · WordPress · Button Widget Smartsoft

Name of the Vulnerable Software and Affected Versions: The Button Widget Smartsoft plugin for WordPress versions up to, and including, 1.0.1 Description: The issue is due to missing nonce validation on the smartsoftbutton settings page, making it possible for unauthenticated attackers to update t...

PT-2022-14857 · WordPress · Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce WordPress plugin versions prior to 6.6.0 Description: The issue is related to stored HTML injection due to a lack of escaping and sanitizing in the payment gateway titles. This allows for potential malicious code injection...

PT-2022-8002 · Itech · Tech Dating Script

Name of the Vulnerable Software and Affected Versions: Itech Dating Script version 3.26 Description: A critical issue was found in the file /see more details.php, where the manipulation of the id argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

PT-2022-22971 · Kvf-Admin · Kvf-Admin

Name of the Vulnerable Software and Affected Versions: kvf-admin through 2022-02-12 Description: The issue allows remote attackers to execute arbitrary code because deserialization is mishandled. The rememberMe parameter is encrypted with a hardcoded key from the...

PT-2022-15753 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 2.0 Description: A critical issue has been found in the Login Page component, specifically in the file /pms/index.php. The manipulation of the user name argument with the input admin' o...

PT-2022-14202 · WordPress · Awin Data Feed

Name of the Vulnerable Software and Affected Versions: Awin Data Feed WordPress plugin versions prior to 1.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted via an AJAX action...

PT-2022-14118 · 3S Smart Software Solutions · Codesys Opc Da Server

Name of the Vulnerable Software and Affected Versions: CODESYS OPC DA Server versions prior to V3.5.18.20 Description: The issue concerns the storage of PLC passwords in plain text within the configuration file of the CODESYS OPC DA Server, making these passwords visible to all authorized Microso...

PT-2022-21079 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version US AC10V1.0RTL V15.03.06.26 multi TD01 Description: A remote code execution issue was discovered, allowing exploitation via the lanIp parameter. Recommendations: For Tenda AC10 version US AC10V1.0RTL V15.03.06.26 multi TD01...

PT-2022-22223 · Wavlink · Wavlink Wl-Wn575A3

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN575A3 version RPT75A3.V4300.201217 Description: A command injection issue was discovered, allowing attackers to execute arbitrary commands via a crafted POST request to the obtw function. This enables attackers to send malicious...

PT-2022-21853 · Openvpn · Openvpn Access Server

Name of the Vulnerable Software and Affected Versions: OpenVPN Access Server versions 2.10.0 through 2.10.x and versions prior to 2.11.0, can be simplified to: OpenVPN Access Server versions 2.10.0 through 2.11.0, but since 2.11.0 is not included, it is more accurate to say: OpenVPN Access Server...

PT-2022-20959 · Unknown · Newsletter Module

Name of the Vulnerable Software and Affected Versions: Newsletter Module versions 3.x Description: The issue is related to a SQL injection vulnerability. It can be exploited via the zemez newsletter email parameter at the "/index.php" API endpoint. Recommendations: For Newsletter Module version...

PT-2022-21061 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered via the items parameter in the formdelMasteraclist function. Recommendations: For Tenda M3 version 1.0.0.12, consider restricting access to the formdelMasteraclist...

PT-2022-17595

Name of the Vulnerable Software and Affected Versions: git-clone affected versions not specified Description: The git-clone package is susceptible to Command Injection due to insecure usage of the --upload-pack feature of git. This allows for potential malicious code execution. Credit for...

PT-2022-21069 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the desc parameter in the function FUN 00413be4. This issue affects the TOTOLINK T6 device. Recommendations: For TOTOLINK T6 version 4.1.9cu.517...

PT-2022-14446

Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-12L Description The issue is related to a missing bounds check in the read attr value function of gatt db.cc, which could lead to a possible out of bounds write. This might result in remote code...

PT-2022-21057 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A stack overflow issue was discovered via the list parameter in the formSetQosBand function. Recommendations: For Tenda AX1806 version 1.0.0.1, consider restricting access to the formSetQosBand functi...