PT-2022-12900 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to 756 Description: A XSS issue exists that allows an attacker to execute javascript code via the module form name field. Recommendations: For versions prior to 756, update to a version above 756 to resolve the issu...

PT-2022-7857 · Unknown · Administrate

Name of the Vulnerable Software and Affected Versions: administrate versions 0.1.4 and earlier Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the user's OAuth authorization code. Recommendations: For versions 0.1.4 and earlier, update to a version that fixe...

PT-2022-23641 · Samsung · Samsung Email

Name of the Vulnerable Software and Affected Versions: Samsung email versions prior to 6.1.70.20 Description: The issue allows an attacker to obtain sensitive information through an intent redirection vulnerability using implicit intent. Recommendations: For versions prior to 6.1.70.20, update to...

PT-2022-23984 · Ittiam · Ittiam Libmpeg2

Name of the Vulnerable Software and Affected Versions: Ittiam libmpeg2 versions prior to 2022-07-27 Description: The issue is related to the use of memcpy with overlapping memory blocks in the impeg2 mc fullx fully 8x8 function. Recommendations: For versions prior to 2022-07-27, update to a versi...

PT-2022-12897 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to 756 Description: A XSS issue exists that allows an attacker to execute javascript code via the event filter name field. Recommendations: For versions prior to 756, update to a version above 756 to resolve the iss...

PT-2022-6671 · Asus · Asuswrt

Name of the Vulnerable Software and Affected Versions: Asuswrt versions prior to 3.0.0.4.386 48706 Asuswrt-Merlin New Gen versions prior to 386.7 Description: A memory corruption issue exists in the httpd unescape functionality. This can be triggered by a specially-crafted HTTP request, leading t...

PT-2022-22955 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.5.0 BIG-IP versions 15.1.x through 15.1.6.0 BIG-IP versions 16.1.x through 16.1.3.0 Description: An authenticated attacker with Resource Administrator or Manager privileges can create...

PT-2022-22391 · Amazon +1 · Amazon Web Services +4

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 15.1.x through 15.1.6.0 F5 BIG-IP versions 16.1.x through 16.1.3.0 F5 BIG-IQ versions 8.x Description: The issue arises when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP or BIG-...

PT-2022-20938 · Arris · Bgw320 +5

Name of the Vulnerable Software and Affected Versions: muhttpd versions prior to 1.1.7 Description: The issue allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first...

PT-2022-20751 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 15.1.x through 15.1.3 BIG-IP versions 16.1.x through 16.1.0 Description: An authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApp...

PT-2022-22273 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 14.1.x through 14.1.5 BIG-IP versions 15.1.x through 15.1.6.1 BIG-IP versions 16.0.x through 16.0.1.1 Description: When an iRule containing the HTTP::payload command is configured on a virtual server, undisclosed traffic can...

PT-2022-21931 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x F5 BIG-IP versions 14.1.x through 14.1.4 F5 BIG-IP versions 15.1.x through 15.1.5 F5 BIG-IP versions 16.1.x through 16.1.2 Description: A vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management...

PT-2022-22645 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 14.1.x through 14.1.5 BIG-IP versions 15.1.x through 15.1.6.1 BIG-IP versions 16.1.x through 16.1.2.2 Description: When an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory...

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability

A vulnerability in the External RESTful Services ERS API of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to excessive verbosity in a specific REST API output. An attacker could exploit this...

SUSE-SU-2022:2648-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2022-2056: Fixed a division by zero denial of service bsc1201176. - CVE-2022-2057: Fixed a division by zero denial of service bsc1201175. - CVE-2022-2058: Fixed a division by zero denial of service bsc1201174...

SUSE-SU-2022:2636-1 Security update for mokutil

This update for mokutil fixes the following issues: - Adds SBAT revocation support to mokutil. bsc1198458 New options added see manpage: - mokutil --sbat List all entries in SBAT. - mokutil --set-sbat-policy latest | previous | delete To set the SBAT acceptance policy. - mokutil...

PT-2022-4130 · F5 · F5 Big-Ip +1

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x F5 BIG-IP versions 14.1.x through 14.1.5.0 F5 BIG-IP versions 15.1.x through 15.1.6.0 F5 BIG-IP versions 16.1.x through 16.1.3.0 F5 BIG-IP versions 17.0.x through 17.0.0.0 F5 BIG-IQ versions 7.x F5 BIG-IQ versions 8....

PT-2022-6778 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 104.0.5112.79 Description: The issue is related to a heap buffer overflow in the PrintPreview functionality of Google Chrome, which could allow an attacker to exploit heap corruption via a crafted HTML page if ...

PT-2022-19842 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions prior to 12.0 Description: The issue is related to predictable token generation when appliance linking is enabled. Recommendations: For versions prior to 12.0, update to version 12.0 or lat...

MGASA-2022-0269 Updated gdk-pixbuf2.0 packages fix security vulnerability

It was discovered that gdk-pixbuf contained a buffer overwrite in io-gif-animation.c compositeframe exploitable using a crafted GIF CVE-2021-46829...