PT-2022-25878 · 74Cmsse · 74Cmsse

Name of the Vulnerable Software and Affected Versions: 74cmsSE version 3.12.0 Description: The issue allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account. Recommendations: For 74cmsSE version 3.12.0, at the...

PT-2022-36685 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash was reported. The crash occurred in the following functions: flb parser create, flb parser conf file, and is related ...

PT-2022-21972 · Unknown · Resiot Iot Platform +1

Name of the Vulnerable Software and Affected Versions: ResIOT IOT Platform + LoRaWAN Network Server versions through 4.1.1000114 Description: The issue concerns multiple Cross Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited via the form fields. Recommendations: For...

CVE-2022-39295 Improper Neutralization of Alternate XSS Syntax in Knowage-Server

Knowage is an open source suite for modern business analytics alternative over big data systems. KnowageLabs / Knowage-Server starting with the 6.x branch and prior to versions 7.4.22, 8.0.9, and 8.1.0 is vulnerable to cross-site scripting because the XSSRequestWrapper::stripXSS method can be...

PT-2022-16810 · Kylin · Kylin

Name of the Vulnerable Software and Affected Versions: Kylin versions 2.6.5 and earlier Kylin versions 3.1.2 and earlier Kylin versions 4.0.1 and earlier Description: The issue is related to a command injection vulnerability in Kylin's cube designer function. This occurs when overwriting system...

HPESBNW04373 rev.2 - HPE Aruba EdgeConnect Enterprise Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software See information in summary Affected Products Aruba EdgeConnect Enterprise Orchestrator on-premises...

PT-2022-17735 · Beckman Coulter · Beckman Coulter Remisol Advance

Name of the Vulnerable Software and Affected Versions: Beckman Coulter Remisol Advance versions v2.0.12.1 and prior Description: The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance allow non-privileged users to overwrite and manipulate...

PT-2022-26359 · Veritas · Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0 Veritas related products affected versions not specified Description: A SQL Injection attack issue was discovered, affecting the idm, nbars, and SLP manager code of the NetBackup Primary server...

PT-2022-34710 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.328 Description: A use-after-free warning was identified in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34660 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain data structure, referred to as skb, remains available after being added to a...

PT-2022-34694 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue is related to the addition of debugfs lookup and remove in debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-36654 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkRect::setBoundsCheck, SkEdgeClipper::clipCubic...

PT-2022-8240 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not...

PT-2022-8230 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The provided information does not contain details about a specific vulnerability, but rather a notification about a rejected CVE candidate number. There is no general information about...

CVE-2022-22525

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segment error that can be used to trigger a denial-of-service attack if non-scalar...

PT-2022-33371 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.10 through v5.19.3 Description: The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33658 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A memory corruption issue was discovered, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-25523 · Samsung · Mtower

Name of the Vulnerable Software and Affected Versions: Samsung mTower versions 0.3.0 and earlier Description: A Memory Allocation with Excessive Size Value issue in the TEE Realloc function allows a trusted application to trigger a Denial of Service DoS by invoking the function TEE Realloc with a...

PT-2022-23125

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue arises when the QuantizeAndDequantizeV3 function is given a nonscalar n...