PT-2022-33470 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.1 Description: A refcount leak bug was discovered in the ASoC: mt6359 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2022-5080 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation ...

PT-2022-12119 · Anydesk · Anydesk

Name of the Vulnerable Software and Affected Versions: AnyDesk versions prior to 6.2.6 AnyDesk versions 6.3.x prior to 6.3.5 Description: An issue allows the upload of an arbitrary file to a victim's local /Downloads/ directory without approval or action taken by the victim. This occurs when the...

PT-2022-23655 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung pass versions prior to 4.0.03.1 Description: The issue is related to improper access control in Samsung pass, allowing physical attackers to access data on a certain state of an unlocked device. Recommendations: For versions prior to...

PT-2022-8895 · Unknown · Conf-Cfg-Ini

Name of the Vulnerable Software and Affected Versions: conf-cfg-ini versions prior to 1.2.2 Description: The issue arises when an attacker submits a malicious INI file to an application that parses it with decode, resulting in prototype pollution on the application. This can be exploited further...

PT-2022-7208 · Tiffsplit +6 · Tiffsplit +6

Name of the Vulnerable Software and Affected Versions: Tiffsplit versions 4.4.0 and earlier Description: The issue is related to a stack overflow in the TIFFVGetField function of the LibTIFF library, which can be exploited by an attacker to cause a Denial of Service DoS using a specially crafted...

PT-2022-11312 · Geoserver · Geoserver

Name of the Vulnerable Software and Affected Versions: GeoServer versions 2.18.5 and earlier GeoServer versions 2.19.x through 2.19.2 Description: The issue allows for Server-Side Request Forgery SSRF via the option for setting a proxy host. This means an attacker could potentially force the serv...

PT-2021-16578 · Unknown · Libsflacextractor

Name of the Vulnerable Software and Affected Versions: libsflacextractor library prior to SMR MAY-2021 Release 1 Description: The issue is related to an improper input validation vulnerability in the sflacfd get frm function. This vulnerability allows attackers to execute arbitrary code on the...

PT-2021-10985 · Fast Ber · Fast Ber

Name of the Vulnerable Software and Affected Versions: fast ber versions prior to v0.5 Description: An issue was discovered in the yy::yylex function located in asn compiler.hpp, which has a heap-based buffer over-read. Recommendations: For versions prior to v0.5, update to version v0.5 or later ...

PT-2021-6791 · Smarty +2 · Smarty +2

Name of the Vulnerable Software and Affected Versions: Smarty versions prior to 3.1.39 Description: The issue is related to incorrect code generation handling when processing invalid function names in the Smarty template engine for PHP. This can allow a remote attacker to execute arbitrary code...

PT-2020-19758 · Hello.Js · Hellojs

Name of the Vulnerable Software and Affected Versions: hellojs versions prior to 1.18.6 hello.js versions prior to 1.18.6 Description: The issue arises from the package getting the oauth redirect parameter from the URL and passing it to location.assign without proper checks and sanitization. This...

PT-2022-8871 · Upx +2 · Upx +2

Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: An invalid memory address reference was discovered in the elf lookup function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, consider updating to a newer version that contains...

PT-2020-14049 · Philips · Philips Clinical Collaboration Platform

Name of the Vulnerable Software and Affected Versions: Philips Clinical Collaboration Platform versions 12.2.1 and prior Description: The issue arises because the product does not properly validate input or data it receives, which can lead to incorrect processing. Recommendations: For versions...

PT-2020-5644

Name of the Vulnerable Software and Affected Versions rack versions prior to 2.2.3 rack versions prior to 2.1.4 Description A security issue exists due to a reliance on cookies without proper validation or integrity checks, making it possible for an attacker to forge a secure or host-only cookie...

PT-2019-15559 · Alt Linux Team +2 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 19.13.5.44 ALT Linux affected versions not specified Description: The issue allows HTTP header injection via the url table function. There is also a mention of a vulnerability in the ALT Linux package, but details...

PT-2019-13694 · Openstack +1 · Openstack Nova +1

Name of the Vulnerable Software and Affected Versions: OpenStack Nova versions prior to 17.0.12 OpenStack Nova versions 18.x prior to 18.2.2 OpenStack Nova versions 19.x prior to 19.0.2 Description: An issue in OpenStack Nova may leak details of the underlying environment in the response to an AP...

PT-2019-6418 · Red Hat +5 · Resteasy +6

Name of the Vulnerable Software and Affected Versions: resteasy versions 3.x.x prior to 3.12.0.Final resteasy versions 4.x.x prior to 4.6.0.Final Description: A flaw was found in resteasy where an improper input validation results in returning an illegal header that integrates into the server's...

PT-2014-2527 · University Of California · Boinc

Name of the Vulnerable Software and Affected Versions: BOINC versions 6.10.58 through 6.12.34 Description: A stack-based buffer overflow issue allows remote attackers to have an unspecified impact via multiple file signature elements. Recommendations: For BOINC versions 6.10.58 through 6.12.34,...

[SA13287] SugarCRM Unspecified Security Issues

TITLE: SugarCRM Unspecified Security Issues SECUNIA ADVISORY ID: SA13287 VERIFY ADVISORY: http://secunia.com/advisories/13287/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SugarCRM 1.x http://secunia.com/product/3845/ SugarCRM 2.x http://secunia.com/product/4314/...