PT-2022-17285 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A buffer overflow issue was discovered via the time parameter in the saveparentcontrolinfo function. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...

PT-2022-17380 · Taocms · Taocms

Name of the Vulnerable Software and Affected Versions: taocms version 3.0.2 Description: The issue allows attackers to execute code injection via arbitrarily editing the .htaccess file. Recommendations: For taocms version 3.0.2, restrict access to the .htaccess file to prevent arbitrary edits and...

PT-2022-4300

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a function kbase jd user buf pin pages in mali kbase mem.c, which is part of the graphics processor driver in Android operating system for Google Pixel devices. It involves an out-of-bounds...

PT-2022-6718 · Adobe · Acrobat 2020 +2

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 17.012.30205 and earlier Adobe Acrobat Reader DC versions 20.005.3031x and earlier Adobe Acrobat Reader DC versions 22.001.20085 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat 202...

PT-2022-5670 · Ckeditor4 +1 · Ckeditor4 +1

Name of the Vulnerable Software and Affected Versions: CKEditor4 versions prior to 4.18.0 Description: The issue is related to the dialog plugin in CKEditor4, which contains a vulnerability allowing abuse of a dialog input validator regular expression. This can cause a significant performance dro...

PT-2022-18173 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the upnp function via the upnp ttl parameter. This allows attackers to execute arbitrary commands via a crafted request. Recommendations: Fo...

PT-2022-17333 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: CuppaCMS version 1.0 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the saveConfigData function in the /classes/ajax/Functions.php file. Recommendations: For CuppaCMS version 1.0, as a...

PT-2022-18179 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: A command injection issue was found in the ddns function, allowing attackers to execute arbitrary commands via a crafted request. The vulnerability is exploited through the ddns name, ddns pwd, h ddns,...

PT-2022-18175 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the static IP settings function. This vulnerability allows attackers to execute arbitrary commands via a crafted request, specifically throu...

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

CVE-2022-0327

The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the errormessage parameter before outputting it back in the response of the jltmarestrictcontent AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scriptin...

PT-2022-13107

Name of the Vulnerable Software and Affected Versions The Master Addons for Elementor WordPress plugin versions prior to 1.8.5 Description The issue arises from the lack of sanitization and escaping of the error message parameter in the response of the "jltma restrict content" AJAX action. This...

PT-2022-4804 · Apple +7 · Apple Macos +8

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.6.5 Security Update 2022-003 Catalina Description: A cookie management issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information...

PT-2022-12189

Name of the Vulnerable Software and Affected Versions TOTOLINK A3100R versions =V4.1.2cu.5050 B20200504 Description A Command Injection issue exists, allowing potential exploitation via the hosTime parameter in the 'adm/ntm.asp' endpoint. Recommendations For TOTOLINK A3100R versions =V4.1.2cu.505...

PT-2022-13517 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: gitea versions prior to 1.16.4 Description: The issue concerns missing authorization in the gitea repository. This allows for improper authorization, potentially leading to unauthorized access. A patch is available as part of the 1.16.4...

PT-2022-16533 · Casaos · Casaos

Name of the Vulnerable Software and Affected Versions: CasaOS versions prior to 0.2.7 Description: The issue is a command injection vulnerability. It can be exploited via the component that handles leave or join zerotier API requests. Recommendations: For versions prior to 0.2.7, update to versio...

PT-2022-12906 · Antaris · Razorengine

Name of the Vulnerable Software and Affected Versions: Antaris RazorEngine versions through 4.5.1-alpha001 Description: An attacker can execute arbitrary .NET code in a sandboxed environment if users can externally control template contents. This issue affects products that are no longer supporte...

PT-2022-2920 · Google · Fuchsia

Name of the Vulnerable Software and Affected Versions: Fuchsia versions prior to 4.1.1 Description: The issue is related to information disclosure. An attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX RSRC KIND ROOT. Recommendations: For...

PT-2022-10707 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.2 through 7.3.6 Liferay DXP 7.3 before fix pack 2 Description: A cross-site scripting XSS issue exists in the Blogs module's edit blog entry page, allowing remote attackers to inject arbitrary web script or HTML vi...

PT-2022-16704 · Zoho · Zoho Manageengine Admanager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Key Manager Plus versions prior to 6200 Description: An issue was discovered in the application where a service allows a user with the level Operator to access stored SSL certificates and associated key pairs during export...