PT-2022-5097 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE...

PT-2022-5049 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.8 and earlier Adobe Photoshop versions 23.4.2 and earlier Description: The issue is related to the use of an uninitialized pointer in Adobe Photoshop, which could result in arbitrary code execution in the context...

PT-2022-24493 · Genymotion · Genymotion Desktop

Name of the Vulnerable Software and Affected Versions: Genymotion Desktop version 3.2.1 Description: The issue allows attackers to escalate privileges and execute arbitrary code via a crafted binary, leveraging a DLL hijacking vulnerability. Recommendations: For Genymotion Desktop version 3.2.1,...

PT-2022-20949 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2022.2.14 and prior versions Description: The issue is related to an Improper Access Control vulnerability in the Duo SMS two-factor authentication of Devolutions Remote Desktop Manager. This...

PT-2022-13998 · Hewlett Packard · Hp Thinpro

Name of the Vulnerable Software and Affected Versions: HP ThinPro 7.2 versions 7.2 Service Pack 8 through 7.2 Service Pack 9 Description: A potential security issue has been identified. HP has released Service Pack 10 to address the issue introduced in Service Pack 8. Recommendations: For HP...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2022-23120 · Typo3 · Typo3/Html-Sanitizer

Name of the Vulnerable Software and Affected Versions: typo3/html-sanitizer versions prior to 1.0.7 typo3/html-sanitizer versions prior to 2.0.16 Description: The typo3/html-sanitizer package, an HTML sanitizer written in PHP, has a parsing issue due to the upstream package masterminds/html5. Thi...

PT-2022-20979 · Wireshark +7 · Wireshark +7

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.4.0 through 3.4.15 Wireshark versions 3.6.0 through 3.6.7 Description: The issue is related to an infinite loop in the F5 Ethernet Trailer protocol dissector, which allows for denial of service via packet injection or...

PT-2022-5234 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 17.3 and earlier Adobe InCopy versions 16.4.2 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. An attacker could leverage this to bypass...

PT-2022-5061 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds read that could lead to disclosure of sensitive memory. An attacker could leverage this to bypass...

PT-2022-5212 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds read that could lead to disclosure of sensitive memory. An attacker could leverage this to bypass...

PT-2022-5214 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitati...

PT-2022-5080 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation ...

PT-2022-5157 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 17.3 and earlier Adobe InCopy versions 16.4.2 and earlier Description: The issue is related to a heap-based buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code in the context of the...

PT-2022-5067 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 7.4.2j Brocade Fabric OS versions prior to 8.2.0 cbn5 Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 9.1.1 Description: The issue i...

PT-2022-5152 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.8 and earlier Adobe Photoshop versions 23.4.2 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user...

PT-2022-21367 · Unisys · Unisys Data Exchange Management Studio

Name of the Vulnerable Software and Affected Versions: Unisys Data Exchange Management Studio versions prior to 6.0.IC2 Unisys Data Exchange Management Studio versions 7.x prior to 7.0.IC1 Description: The issue is related to the absence of an Anti-CSRF token to authenticate POST requests, which...

PT-2022-24803 · Node-Irc +1 · Node-Irc +1

Name of the Vulnerable Software and Affected Versions: matrix-appservice-irc versions prior to 0.35.0 Description: The issue arises from a bug in the underlying matrix-org/node-irc library, causing matrix-appservice-irc to incorrectly parse multiple modes in a single mode command. This can...

PT-2022-37522 · Clamav · Clamav

Name of the Vulnerable Software and Affected Versions: clamav versions prior to 0.103.7 Description: The issue is related to the clamav software, where an update to version 0.103.7 fixes several problems, including the upgrade of the UnRAR library to version 6.1.7, a fix for the logical signature...

PT-2022-12119 · Anydesk · Anydesk

Name of the Vulnerable Software and Affected Versions: AnyDesk versions prior to 6.2.6 AnyDesk versions 6.3.x prior to 6.3.5 Description: An issue allows the upload of an arbitrary file to a victim's local /Downloads/ directory without approval or action taken by the victim. This occurs when the...