PT-2022-31289

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.17 through v5.17.13 Description A refcount leak was discovered in the clcdfb of vram setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v3.17...

PT-2022-31593

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a refcount leak in the fsl rio setup function. It was introduced in version v3.3 and fixed in version v5.15.46. The actual impact and attack plausibility have not yet...

PT-2022-31299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a refcount leak in the fsl rio setup function. It was introduced in version v3.3 and fixed in version v5.17.14. The actual impact and attack plausibility have not yet...

PT-2022-30917

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.15 and fixed in Linux Kernel versio...

PT-2022-31268

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns an out-of-bounds read in LDT setup. It was introduced in version v2.6.15 and fixed in version v5.17.14. The actual impact and attack plausibility have not yet been proven...

PT-2022-32319

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.15 and fixed in Linux Kernel versi...

PT-2022-32148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.15 through 4.19.246 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.15 through...

PT-2022-31813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns an out-of-bounds read in LDT setup. It was introduced in version v2.6.15 and fixed in version v5.10.121. The actual impact and attack plausibility have not yet been proven...

PT-2022-32012

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.15 and fixed in Linux Kernel versi...

PT-2022-32250

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.15 and fixed in version v4.14.283...

CVE-2022-1971

The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-1321

The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example ...

CVE-2022-1095

The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-1010

The Login using WordPress Users WP as SAML IDP WordPress plugin before 1.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in...

CVE-2022-1113

The Flower Delivery by Florist One WordPress plugin through 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setups...

Cross site scripting

The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite setup...

Cross site scripting

The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example ...

CVE-2022-1029 Limit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site Scripting

The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite...

CVE-2022-33202

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...

CVE-2022-33202

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...