PT-2022-36661 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as...

PT-2022-7349 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A critical vulnerability has been found in the Linux Kernel, affecting the spl2sw nvmem get mac address function in the drivers/net/ethernet/sunplus/spl2sw driver.c file of the BPF...

PT-2022-37320 · Skia · Skia

Name of the Vulnerable Software and Affected Versions: Skia affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs in the SkPathPriv::IsRectContour function. This function is called by SkPath::isRect and SkCanvas::clipPath. No information is...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM App Connect Enterprise and IBM Integration Bus

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM App Connect Enterprise and IBM Integration Bus. These issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU - Apr 2022 includes Oracle April 2022 CPU. The fix includes IBM Jav...

PT-2022-6980 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this issue. Th...

Security Bulletin: IBM Tivoli Composite Application Manager for Transactions affected by vulnerabilities in IBM JRE (Multiple CVEs)

Abstract IBM Tivoli Composite Application Manager for Transactions is shipped with two IBM JREs that are based on Oracle Java. It is also dependent on ITM 6.2.1 Framework, which also has its own JRE. Oracle has released an April 2013 Critical Patch Update CPU that contains security vulnerability...

RHEL 9 : mysql (RHSA-2022:6590)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6590 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...

mysql: InnoDB unspecified vulnerability (CPU Jul 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

PT-2022-22555 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the /multiarch/memmove-vec-unaligned-erms.S API endpoint. Recommendations: At the moment, there is no information about a newer...

PT-2022-24664 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Location module affected versions not specified Description: The issue concerns a vulnerability in the location module that allows bypassing permission verification, potentially leading to privilege escalation. Recommendations: At the moment,...

Moderate: Red Hat Security Advisory: rh-mysql80-mysql security, bug fix, and enhancement update

An update for rh-mysql80-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : rh-mysql80-mysql (RHSA-2022:6518)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6518 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

PT-2022-25238 · Lenovo · Wmi Smi Handler

Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: A buffer overflow issue exists in the WMI SMI Handler, potentially allowing an attacker with local access and elevated privileges to execute arbitrary code. Recommendations: At the moment,...

PT-2022-14617 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue affects Android. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2022-5782 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, which can be exploited by a remote attacker to execute arbitrary code. This can...

PT-2022-14612 · Unknown · Android Soc

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue concerns Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...

PT-2022-14614 · Unknown · Android Soc

Name of the Vulnerable Software and Affected Versions: Android SoC versions affected versions not specified Description: The issue affects Android SoC. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendations: At the...

PT-2022-5778 · Microsoft · Office Powerpoint +1

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft PowerPoint, specifically with the handling of memory after it has been freed. This can be exploited by an...

PT-2022-5839 · Unknown · Av1 Video Extension

Name of the Vulnerable Software and Affected Versions: AV1 Video Extension affected versions not specified Description: The issue is related to insufficient input validation in the AV1 Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code using a...

PT-2022-5862 · Microsoft · Defender For Endpoint For Mac

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Endpoint for Mac affected versions not specified Description: The issue is related to insufficient access control, which can be exploited to elevate privileges. Recommendations: At the moment, there is no information...