PT-2022-34710 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.328 Description: A use-after-free warning was identified in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34694 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue is related to the addition of debugfs lookup and remove in debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34660 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain data structure, referred to as skb, remains available after being added to a...

PT-2022-36654 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkRect::setBoundsCheck, SkEdgeClipper::clipCubic...

PT-2022-8240 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not...

PT-2022-8230 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The provided information does not contain details about a specific vulnerability, but rather a notification about a rejected CVE candidate number. There is no general information about...

CVE-2022-22525

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function...

PT-2022-33349 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns ignoring interrupts if no descriptor is present in the dw-axi-dmac driver. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...

PT-2022-25523 · Samsung · Mtower

Name of the Vulnerable Software and Affected Versions: Samsung mTower versions 0.3.0 and earlier Description: A Memory Allocation with Excessive Size Value issue in the TEE Realloc function allows a trusted application to trigger a Denial of Service DoS by invoking the function TEE Realloc with a...

PT-2022-23125

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue arises when the QuantizeAndDequantizeV3 function is given a nonscalar n...

PT-2022-33658 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A memory corruption issue was discovered, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33371 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.10 through v5.19.3 Description: The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segment error that can be used to trigger a denial-of-service attack if non-scalar...

PT-2022-24765 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...

PT-2022-25021 · Samsung · Samsung Mtower

Name of the Vulnerable Software and Affected Versions: Samsung mTower versions 0.3.0 and earlier Description: The issue is related to a missing check on the return value of EC KEY set public key affine coordinates in the sign pFwInfo function, leading to a denial of service. Recommendations: For...

PT-2022-9680 · Avaya · Avaya Ip Office Usb Creator +1

Name of the Vulnerable Software and Affected Versions: Avaya IP Office Admin Lite and USB Creator versions 11.1 Feature Pack 2 Service Pack 1 and earlier Description: A privilege escalation issue was discovered that may allow a local user to escalate privileges. Recommendations: For Avaya IP Offi...

PT-2022-37229 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves several function calls: gs fapi ft get scaled font, ...

PT-2022-21204 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 WWBN AVideo dev master commit 3f7c0364 Description: An issue exists in the login functionality due to an improper password check. This allows an attacker with a user's password hash to directly log into the account,...

PT-2022-37175 · Git +1 · Libressl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions, including i2c ASN1...

PT-2022-4387 · Adobe · Premiere Elements

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Elements versions 2020v20 and earlier Description: The issue is related to an Uncontrolled Search Path Element, which could lead to Privilege Escalation. An attacker could leverage this to obtain admin privileges using an...