PT-2022-23884 · Mdaemon Technologies · Mdaemon Technologies Securitygateway For Email Servers

Name of the Vulnerable Software and Affected Versions: MDaemon Technologies SecurityGateway for Email Servers version 8.5.2 Description: The issue concerns HTTP Response splitting, which occurs via the format parameter. This allows for potential manipulation of HTTP responses. Recommendations: Fo...

PT-2022-23379 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLink A3600R version 4.1.2cu.5182 B20201102 Description: A command injection issue was found via the username parameter in the "/cstecgi.cgi" API endpoint. This allows for potential command injection attacks. Recommendations: For TOTOLink...

PT-2022-24076 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the time parameter at the setSmartPowerManagement function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider restricting access to the...

PT-2022-23403 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the ip parameter in the setDiagnosisCfg function, allowing potential exploitation. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139...

PT-2022-22623 · D Link · D-Link Wireless Ac1200 Dual Band Vdsl Adsl Modem Router Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware version 1.01 Description: The issue allows unauthenticated attackers to cause a Denial of Service DoS via the User parameter or Pwd parameter to "Login.asp"...

PT-2022-23209 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: An issue was discovered in a misconfigured environment that exposes the Blue Prism Application server, allowing an authenticated user to reverse engineer the Blue Prism software and...

PT-2022-4663 · Trend Micro · Trend Micro Housecall

Name of the Vulnerable Software and Affected Versions: Trend Micro HouseCall versions 1.62.1.1133 and below Description: The issue is related to incorrect permission assignment, which could allow a local attacker to escalate privileges due to an overly permissive folder in the product installer...

PT-2022-23784 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W version MiniGRW1A0V100R006 Description: A command injection issue was discovered via the param parameter at DelL2tpLNSList. Recommendations: For H3C GR-1200W version MiniGRW1A0V100R006, consider restricting access to the...

PT-2022-24097 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A stack overflow issue was discovered in the Tenda AX1803, specifically via the timezone parameter in the fromSetSysTime function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider restricti...

PT-2022-9135 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue arises from the method PVRSRVBridgeTLDiscoverStreams, which allocates a buffer on the heap and fills it via TLServerDiscoverStreamsKM. If TLServerDiscoverStreamsKM fails due t...

PT-2022-4634 · Measuresoft · Measuresoft Scadapro Server

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server All Versions Description: The issue is related to the use of unmaintained ActiveX controls in Measuresoft ScadaPro Server, which may lead to two stack-based buffer overflow instances when processing a specific...

PT-2022-4637 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the incorrect resolution of links before file access in the Measuresoft ScadaPro Server and Client. This could potentially allow a remote attacker to...

PT-2022-22434 · Zengenti · Zengenti Contensis Classic

Name of the Vulnerable Software and Affected Versions: Zengenti Contensis Classic versions prior to 15.2.1.79 Description: The file upload wizard does not correctly check that a user has authenticated, allowing the execution of arbitrary commands by uploading a crafted aspx file. Recommendations:...

PT-2022-19693 · Qualys · Qualys Cloud Agent

Name of the Vulnerable Software and Affected Versions: Qualys Cloud Agent version 4.8.0-49 Description: An issue was discovered in Qualys Cloud Agent where it writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may unexpectedly write credentials from environmen...

PT-2022-14121 · Kubevirt +1 · Kubevirt +1

Name of the Vulnerable Software and Affected Versions: KubeVirt versions up to 0.56 KubeVirt version 0.55.1 Description: A path traversal vulnerability in KubeVirt allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are...

PT-2022-21713 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows remote attackers to inject an arbitrary script via unspecified vectors, exploiting a cross-site scripting vulnerability in specific parameters. Recommendations: For...

PT-2022-20650 · Gog · Gog Galaxy

Name of the Vulnerable Software and Affected Versions: GOG Galaxy versions 2.0.46 through 2.0.51 Description: An exploitable local privilege escalation issue exists due to insufficient folder permissions. An attacker can hijack the %ProgramData%GOG.com folder structure and change the...

PT-2022-5799 · Fortinet · Fortideceptor

Name of the Vulnerable Software and Affected Versions: FortiDeceptor versions 4.0.2, 4.1.0 through 4.1.1, 4.2.0 Description: The issue is related to an improper neutralization of input during web page generation, which may allow an authenticated user to perform a cross-site scripting XSS attack...

PT-2022-23271 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to SQL Injection via the "/pms/update medicine.php?id=" endpoint. This allows for potential manipulation of database queries using the id variable...

PT-2022-22821 · Unknown · Jpeg-Quantsmooth

Name of the Vulnerable Software and Affected Versions: jpeg-quantsmooth before commit 8879454 Description: The issue is related to a floating point exception FPE in jpeg-quantsmooth. This exception occurs via the /jpeg-quantsmooth/jpegqs+0x4f5d6c endpoint. Recommendations: For versions before...