PT-2022-7422 · Acronis · Acronis Cyber Protect 15 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 30984 Description: The issue is related to excessive privileges assigned to Acronis Agent, leading to sensitive information disclosure. This could allow a remote attacker to gain unauthorized...

PT-2022-25842 · Tenda · Tenda Ac1200 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router Model W15Ev2 version V15.11.0.101576 Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the dmzHost parameter in the setDMZ function. Recommendations: For Tenda...

PT-2022-26273 · Liferay · Friendly Url Module +2

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.5 through 7.4.3.36 Liferay DXP 7.4 update 1 through 36 Description: The issue concerns the Friendly Url module, which does not properly check user permissions. This allows remote attackers to obtain the history o...

PT-2022-26948 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 6.0.3 Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. The developer provides new patched releases for all versions since 3.7. Recommendations: For...

PT-2022-26268

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.7 Liferay DXP versions 7.3 fix pack 2 through update 4 Description A SQL injection issue in the Friendly Url module allows attackers to execute arbitrary SQL commands via a crafted payload injected into the title...

GSD-2022-1006936 usb: mon: make mmapped memory read only

usb: mon: make mmapped memory read only This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit 08e2c70e549b77f5f3af9c76da00779d5756f99...

PT-2022-35790 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-5606

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.9.0 Description The issue is related to an out of bound read in the ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it, likely...

PT-2022-34877 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: A possible memory leak was identified in the ehea register port function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-35085 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns an error handling path in the da7219 register dai clks function. It was introduced in version v5.10 and fixed in version v6.0.3. The actual impact and attack plausibility...

PT-2022-35111 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a use after free in the mt7921 acpi read function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-35137 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35258 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential memory leak was identified in the rtw init cmd priv function of the rtl8723bs driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-35595 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: A potential memory leak issue exists in the ehea register port function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2022-35558 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak was identified in the ext4 fc record modified inode function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-6351 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. A local malicious user could potentially explo...

PT-2022-34978 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak was identified in the xhci alloc stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35719 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue concerns error handling in the netsec register mdio function. It was introduced in version v4.16 and fixed in version v4.19.264. The actual impact and attack plausibility have no...

PT-2022-5600

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.4.0 Description A vulnerability in Example Dags of Apache Airflow is related to incorrect management of code generation. This issue allows an attacker with UI access who can trigger DAGs to execute arbitrary...

PT-2022-35833 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue concerns an uninit memory read in the ath9k htc rx msg function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...