PT-2022-16427

Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to modify logs due to an unauthenticated access vulnerability. Recommendations At the moment, there is no informatio...

harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc

A vulnerability found in harfbuzz. An integer overflow in the hb-ot-shape-fallback.cc component allows attackers to cause a denial of service DoS via unspecified vectors...

FFmpeg has unspecified vulnerabilities (CNVD-2022-77504)

FFmpeg, the FFmpeg team's complete solution for recording, converting, and streaming audio and video, suffers from a security vulnerability stemming from an unknown function in the file ibavcodec/rpzaenc.c of the QuickTime RPZA Video Encoder component, which could be exploited by an attacker to...

PT-2022-10199 · Intel · Intel System Studio

Name of the Vulnerable Software and Affected Versions: IntelR System Studio affected versions not specified Description: The issue is related to an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2022-18565 · Amd · Amd Μprof

Name of the Vulnerable Software and Affected Versions: AMD μProf affected versions not specified Description: The issue is related to insufficient validation in the IOCTL input/output buffer, which may allow an attacker to bypass bounds checks. This could potentially lead to a Windows kernel cras...

PT-2022-10355 · Wago · Wago I/O-Check Service

Name of the Vulnerable Software and Affected Versions: WAGO I/O-Check Service affected versions not specified Description: The issue allows an unauthenticated remote attacker to send a specially crafted packet containing OS commands, which can provoke a denial of service. Recommendations: At the...

PT-2022-5659 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Advanced Local Procedure Call ALPC handler. This can allow an attacker to elevate their...

PT-2022-5509 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue exists due to insufficient input validation in Microsoft Visual Studio, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...

PT-2022-5456 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can lead to a denial-of-service condition. This could allow an...

PT-2022-5446 · Microsoft · Windows Overlay Filter +1

Name of the Vulnerable Software and Affected Versions: Windows Overlay Filter affected versions not specified Description: The issue is related to insufficient access control in the Windows Overlay Filter component, allowing an attacker to elevate their privileges. This can impact the system,...

PT-2022-37529 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt affected versions not specified Description: The issue concerns recent security updates in the base containers of the kubevirt stack. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

PT-2022-36743 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the LibRaw::phase one correct, LibRaw::raw2image ex, and LibRaw::dcraw process functions...

PT-2022-24506 · Elastic +1 · Elasticsearch +1

Name of the Vulnerable Software and Affected Versions: HCL Commerce affected versions not specified Description: The issue allows a remote attacker to cause a denial of service attack on the site and make administrative changes when HCL Commerce is used with Elasticsearch. Recommendations: At the...

PT-2022-24132 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation allows attackers to execute arbitrary commands as a...

PT-2022-24135 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the command line interface of ArubaOS. Successful exploitation allows attackers to execute arbitrary commands as a...

PT-2022-24143 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The scenarios in which disclosure of potentially sensitive...

PT-2022-24131 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute...

PT-2022-36734 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the applyOP function of DngOpcodes::PixelOpcode when handling metadata in DngDecoder. Technical details include t...

PT-2022-24319 · Unknown · Huaxia Erp

Name of the Vulnerable Software and Affected Versions: Huaxia ERP affected versions not specified Description: A problematic issue has been found in Huaxia ERP, affecting an unknown part of the file /depotHead/list of the Retail Management component. The manipulation of the search argument leads ...

PT-2022-24144 · Unknown · Pdf & Print Plugin

Name of the Vulnerable Software and Affected Versions: PDF & Print Plugin affected versions not specified Description: A vulnerability was found in the PDF & Print Plugin, affecting an unknown part of the component Setting Handler. The issue leads to cross-site scripting and can be initiated...