PT-2022-23302 · Airspeed +1 · Airspeed +1

Name of the Vulnerable Software and Affected Versions: AirVelocity 1500 versions prior to 15.18.00.2511 Other AirVelocity and AirSpeed models affected versions not specified Description: The issue concerns the printing of SNMP credentials on the physically accessible serial port during boot. This...

PT-2022-16263 · WordPress · Easy Student Results

Name of the Vulnerable Software and Affected Versions: Easy Student Results WordPress plugin versions 2.2.8 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in...

PT-2022-15878 · WordPress · Vr Calendar

Name of the Vulnerable Software and Affected Versions: VR Calendar WordPress plugin versions prior to 2.3.3 Description: The issue allows any user to execute arbitrary PHP functions on the site. This can lead to unauthorized access and potential code execution. Recommendations: For versions prior...

PT-2022-8644 · Zoho · Manageengine Analytics Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Analytics Plus versions prior to 4350 Description: A Directory Traversal issue exists due to the ZDBQAREFSUBDIR parameter in the "/zropusermgmt" API endpoint. This allows remote attackers to potentially run arbitrary code...

Apache Avro Rust SDK corrupted data read can cause crash

It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

Apache Avro Rust SDK's Reader could consume memory beyond allowed constraints

It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses...

PT-2022-19407 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions 3.6.1 and below Description: The issue allows a low privileged malicious user to potentially exploit it and obtain credentials. The attacker may use the exposed credentials to access the target device and...

PT-2022-21916 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions 3.6.1 and below Description: The issue allows an unauthenticated attacker to exploit a Session Fixation vulnerability by taking advantage of a user with multiple active sessions, potentially hijacking a...

PT-2022-15396 · Ibm · Ibm Workload Scheduler

Name of the Vulnerable Software and Affected Versions: IBM Workload Scheduler versions 9.4 through 9.5 Description: The issue allows a local user to overwrite key system files, which could cause the system to crash. Recommendations: For IBM Workload Scheduler versions 9.4 through 9.5, update to a...

PT-2022-7018 · Microsoft +6 · Net 6.0 +7

Name of the Vulnerable Software and Affected Versions: .NET Core 3.1 versions 3.1.0 through 3.1.27 .NET 6.0 versions 6.0.0 through 6.0.7 Description: An information disclosure issue exists due to incorrect restriction of XML external entity references, potentially allowing a remote attacker to...

PT-2022-4151 · Siemens · Teamcenter

Name of the Vulnerable Software and Affected Versions: Teamcenter versions prior to V12.4.0.15 Teamcenter versions prior to V13.0.0.10 Teamcenter versions prior to V13.1.0.10 Teamcenter versions prior to V13.2.0.9 Teamcenter versions prior to V13.3.0.5 Teamcenter versions prior to V14.0.0.2...

Intel® RST Advisory

Summary: A potential security vulnerability in the Intel® Rapid Storage Technology RST software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-1285 Non-Intel issued Description: Improper...

Intel® DSA Advisory

Summary: A potential security vulnerability in the Intel® Driver & Support Assistant DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26017 Description: Improper access control in t...

Intel® Connect M Android App Advisory

Summary: A potential security vulnerability in the Intel® Connect Mobile Connect M Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-44470 Description: Incorrect default...

Intel® PROSet/Wireless WiFi and Killer™ WiFi Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi products may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability...

PT-2022-4380 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.001.20169 and earlier Adobe Acrobat Reader versions 20.005.30362 and earlier Adobe Acrobat Reader versions 17.012.30249 and earlier Description: The issue is related to an out-of-bounds write vulnerability in...

Intel® VTune™ Profiler Advisory

Summary: A potential security vulnerability in the Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21807 Description: Uncontrolled search path elements in the...

PT-2022-4391 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2019 Update 8 and earlier Adobe FrameMaker versions 2020 Update 4 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past th...

Open AMT Cloud Toolkit Advisory

Summary: A potential security vulnerability in the Open AMT Cloud Toolkit software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-25899 Description: Authentication bypass...

Intel® Edge Insights for Industrial Advisory

Summary: Potential security vulnerabilities in the Intel® Edge Insights for Industrial software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-22730 Description:...