PT-2022-27655 · WordPress · Wp Ulike Plugin

Name of the Vulnerable Software and Affected Versions: WP ULike Plugin versions = 4.6.4 Description: The issue allows attackers to manipulate rating scores by exploiting a race condition vulnerability. This can result in increased or decreased rating scores. Recommendations: For WP ULike Plugin...

PT-2022-27401 · Unknown · Rest Api Authentication Plugin

Name of the Vulnerable Software and Affected Versions: REST API Authentication plugin versions prior to 2.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2022-35673 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A null pointer dereference bug was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.220, update to...

PT-2022-35163 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the verity-loadpin feature, which is related to trusting verity targets with enforcement. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-35263 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the soundwire cadence, where msg-buf is overwritten during write commands. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-35090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A null pointer dereference bug was identified. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.17 and fixed in Linux Kernel version...

PT-2022-27396 · Xfce +3 · Xfce4-Mime-Helper +4

Name of the Vulnerable Software and Affected Versions: xfce4-settings versions 4.16.3 and earlier, 4.17.x before 4.17.1 Description: There is an argument injection issue in the xfce4-mime-helper from the xfce4-settings package. This issue allows for argument injection, which can potentially be...

PT-2022-7599 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.0789 Description: The issue is related to a Use After Free vulnerability in the buffer.c component of the Vim text editor. This vulnerability allows an attacker to access confidential data, compromise data integrity,...

PT-2022-7017 · Microsoft +7 · Net Core 3.1 +9

Name of the Vulnerable Software and Affected Versions: - NuGet versions 6.3.0 and earlier - NuGet versions 6.2.1 and earlier - NuGet versions 6.0.2 and earlier - NuGet versions 5.11.2 and earlier - NuGet versions 5.9.2 and earlier - NuGet versions 5.7.2 and earlier - NuGet versions 4.9.5 and...

PT-2022-25049 · Uphelper · Uphelper

Name of the Vulnerable Software and Affected Versions: UPHelper library versions prior to 3.0.12 Description: The issue allows attackers to access sensitive information via implicit intent, specifically through an implicit intent hijacking vulnerability in the UPHelper library. Recommendations: F...

PT-2022-6746 · Google +3 · Protobuf-Java +4

Name of the Vulnerable Software and Affected Versions: protobuf-java core and lite versions prior to 3.21.7 protobuf-java core and lite versions prior to 3.20.3 protobuf-java core and lite versions prior to 3.19.6 protobuf-java core and lite versions prior to 3.16.3 Description: A parsing issue i...

PT-2022-34034 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to the Linux Kernel, specifically concerning the ipq8074 component. It involves a potential security vulnerability where the gcc sleep clk src is not properly disabled...

PT-2022-23116

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue occurs when tensorflow::full type::SubstituteFromAttrs receives a...

PT-2022-20900 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.2 Description: The issue allows a user's cookies to be sent to the server with an unencrypted request over the HTTP protocol because the 'Secure' attribute is missing in the HTTPS session. This affects the...

PT-2022-24764 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.262 Parasolid versions prior to V34.0.252 Parasolid versions prior to V34.1.242 Parasolid versions prior to V35.0.161 Simcenter Femap versions prior to V2022.1.3 Simcenter Femap versions prior to V2022.2.2...

PT-2022-23678 · Unknown · Waterplugin

Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22040751 Description: The issue is related to improper handling of insufficient permissions or privileges, allowing an attacker to access sensitive device information, including the IMEI and Serial number...

Multiple vulnerabilities in Exment

Overview Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2022-38080 SQL injection CWE-89 - CVE-2022-37333 Stored cross-site scripting CWE-79 - CVE-2022-38089 CVE-2022-38080, CVE-2022-37333 Hibiki Moriyama of STNet,...

PT-2022-15144 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2022.2.0 Description: The issue is related to uncontrolled search path elements in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-15146 · Intel · Intel Haxm

Name of the Vulnerable Software and Affected Versions: IntelR HAXM versions prior to 7.7.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions prior to...

PT-2022-18869 · Nameless · Nameless

Name of the Vulnerable Software and Affected Versions: namelessmc/nameless versions prior to 2.0.2 Description: The issue concerns a session fixation problem. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...