PT-2022-24722 · Unknown · Power Management Service

Name of the Vulnerable Software and Affected Versions: Power management service affected versions not specified Description: The issue is related to a missing permission check in the power management service. This could allow setting up the power management service without needing additional...

PT-2022-26077 · Kyocera · Kyocera Document Solutions Mfps/Printers

Name of the Vulnerable Software and Affected Versions: Kyocera Document Solutions MFPs and printers versions affected versions not specified Description: A vulnerability exists where session information is easily guessable, potentially allowing a network-adjacent attacker to log in to the product...

PT-2022-5773 · Ami · Megarac

Name of the Vulnerable Software and Affected Versions: MegaRAC affected versions not specified Description: The issue is related to errors in code generation in the AMI MegaRAC Redfish API interface, which can be exploited by a remote attacker to execute arbitrary code by sending a specially...

PT-2022-36801 · Git +1 · Gpac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves functions such as gf odf vvc cfg read bs, vvcc box read, and gf...

PT-2022-26589 · Dot Tech · Dot Tech Smart Campus System

Name of the Vulnerable Software and Affected Versions: Dot Tech Smart Campus System affected versions not specified Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /services/Card/findUser. This leads to information disclosure and can...

PT-2022-27533 · Telepad · Telepad

Name of the Vulnerable Software and Affected Versions: Telepad affected versions not specified Description: The issue allows remote unauthenticated users to send instructions to the server, enabling the execution of arbitrary code without prior authorization or authentication. Recommendations: At...

Unspecified vulnerability in prometheus exporter_toolkit

Prometheus is open source software written in the Go language for recording real-time metrics from time series databases built using the HTTP pull model. An unspecified vulnerability exists in Prometheus Exporter Toolkit versions 0.7.2 and prior to 0.8.2, which can be exploited by an attacker to...

GE CIMPLICITY HMI/SCADA Software has an unspecified vulnerability

GE CIMPLICITY HMI/SCADA Software is an automation industrial platform from General Electric GE, Inc. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making.GE CIMPLICITY HMI/SCADA...

PT-2022-25687 · Eyoom Co. +1 · Eyoom Builder

Name of the Vulnerable Software and Affected Versions: Builder program affected versions not specified Description: The issue allows for remote code execution by utilizing cookie values as paths to a file. This can be exploited by a remote attacker to execute or inject malicious code...

PT-2022-25685 · Unknown · Ondiskplayeragent

Name of the Vulnerable Software and Affected Versions: OndiskPlayerAgent affected versions not specified Description: The issue is related to a remote code execution vulnerability due to insufficient verification of URLs in OndiskPlayerAgent. A remote attacker could exploit this to cause remote...

CVE-2022-39325 Cross-site scripting vulnerability in BaserCMS

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users...

Unspecified vulnerability in FusionDIrectory

FusionDIrectory is an application of FusionDIrectory open source. Used to ensure that the user's identity management security. A security vulnerability exists in FusionDIrectory version 1.3, which stems from a failure to properly handle sessions and can be exploited by an attacker to potentially...

Dell PowerPath Management Appliance has an unspecified vulnerability

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance.Dell PowerPath Management Appliance has a security vulnerability for which no information is available...

PT-2022-36783 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the checkRowIsInitialized and checkMemIsInitialized functions of the RawImageData class,...

PT-2023-22487 · Unknown +4 · Llvm-Project +4

Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: The issue is related to a segmentation fault in the llvm-project, specifically via the component mlir::Type::getDialect. There is no information provided about the estimated number of...

PT-2022-36778 · Unknown · Libarchive

Name of the Vulnerable Software and Affected Versions: libarchive affected versions not specified Description: The issue is related to a heap-buffer-overflow read crash. It occurs in the archive read has encrypted entries function. Recommendations: At the moment, there is no information about a...

PT-2022-10912 · Hewlett Packard · Digital Sending Products +1

Name of the Vulnerable Software and Affected Versions: HP Print products and Digital Sending products affected versions not specified Description: The issue concerns potential remote code execution and buffer overflow in certain HP products. This is related to the use of Link-Local Multicast Name...

PT-2022-36773 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: FLAC affected versions not specified Description: The issue is related to a stack-buffer-overflow error. Technical details about the error include the crash type being a Stack-buffer-overflow WRITE 8. The crash state involves several function...

PT-2022-24792 · Unknown · Webvendome

Name of the Vulnerable Software and Affected Versions: Webvendome affected versions not specified Description: The issue concerns an internal server IP disclosure in Webvendome. It can be triggered by sending a GET request to a specific endpoint, although the exact endpoint is not specified in th...

PT-2022-23623 · Elfsight · Elsight Halo

Name of the Vulnerable Software and Affected Versions: Elsight Halo affected versions not specified Description: The Elsight Halo web panel allows connection validation through a POST request to /api/v1/nics/wifi/wlan0/ping, which can be exploited by abusing the DESTINATION parameter to achieve...