PT-2022-15146 · Intel · Intel Haxm

Name of the Vulnerable Software and Affected Versions: IntelR HAXM versions prior to 7.7.1 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions prior to...

PT-2022-15144 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2022.2.0 Description: The issue is related to uncontrolled search path elements in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-18877 · Namelessmc · Nameless

Name of the Vulnerable Software and Affected Versions: namelessmc/nameless versions prior to 2.0.2 Description: The issue concerns a missing critical step in the authentication process. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...

PT-2022-18869 · Nameless · Nameless

Name of the Vulnerable Software and Affected Versions: namelessmc/nameless versions prior to 2.0.2 Description: The issue concerns a session fixation problem. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...

PT-2022-23728 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...

PT-2022-3675 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: Adobe InCopy versions 17.2 and earlier Adobe InCopy versions 16.4.1 and earlier Description: The issue is related to a Heap-based Buffer Overflow in the dynamic memory of Adobe InCopy, which could allow an attacker to execute arbitrary code...

PT-2022-20571

Name of the Vulnerable Software and Affected Versions Gradle versions 6.2 through 7.4.2 Description Gradle is a build tool with a security feature called dependency verification, which validates external dependencies through checksum or cryptographic signatures. In affected versions, there are...

PT-2022-14235 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 10.7 through 14.10.5 GitLab EE versions 15.0 through 15.0.4 GitLab EE versions 15.1 through 15.1.1 Description: The issue concerns incorrect authorization in GitLab EE, allowing an attacker with a valid Deploy Key or Deploy...

PT-2022-4382 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.3.1 and earlier Adobe Illustrator versions 25.4.6 and earlier Description: The issue is related to an out-of-bounds write vulnerability in the memory, which could allow an attacker to execute arbitrary code using...

PT-2022-3003 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.0.2 and earlier Adobe Illustrator versions 25.4.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current...

PT-2022-3521 · Schneider Electric · Ecostruxure Power Commission

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Commission versions prior to V2.22 Description: A vulnerability exists that could cause all remote domains to access the resources supplied by the server when an attacker sends a fetch request from a third-party site or...

PT-2022-20463 · Vapor · Vapor

Name of the Vulnerable Software and Affected Versions: Vapor versions prior to 4.61.1 Description: The issue is related to unbounded, attacker-controlled stack growth, which can lead to a stack overflow and a process crash when using automatic content decoding. An attacker can craft a request bod...

PT-2022-17108 · Apache +1 · Apache Tika +1

Name of the Vulnerable Software and Affected Versions: Apache Tika versions prior to 1.28.2 Apache Tika versions prior to 2.4.0 Description: The issue concerns the BPG parser in Apache Tika, which may allocate an excessive amount of memory when processing carefully crafted files. Recommendations:...

PT-2022-2620 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 17.1 and earlier Adobe InDesign versions 16.4.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in Adobe InDesign that could result in arbitrary code execution in the context of th...

PT-2022-13872 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.12 through 14.8.6 GitLab CE/EE versions 14.9 through 14.9.4 GitLab CE/EE versions 14.10 through 14.10.1 Description: The issue is related to improper access control in GitLab CE/EE, allowing non-project members to acce...

PT-2022-2656 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code versions prior to 1.67.1 Description: The vulnerability in Visual Studio Code is related to insufficient input validation. Exploitation of this issue may allow a remote attacker to execute arbitrary code. Recommendations: F...

PT-2022-13989

Name of the Vulnerable Software and Affected Versions scout versions prior to 4.42 Description The issue allows an attacker to make the application perform arbitrary requests, potentially leading to the theft of cookies, access to private areas, or cross-site scripting xss. Recommendations For...

PT-2022-17570 · Npm · @Yaireo/Tagify

Name of the Vulnerable Software and Affected Versions: @yaireo/tagify versions prior to 4.9.8 Description: The issue affects the package used for rendering UI components inside input or text fields. An attacker can pass a malicious placeholder value to fire the cross-site scripting XSS payload...

PT-2022-13915

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.4.2 FFmpeg versions prior to 5.0.1 Description An integer overflow issue was discovered in the g729 parse function located in libavcodec/g729 parser.c when handling a specially crafted file. This issue can be trigger...

PT-2022-3901 · General Electric · Inet +4

Name of the Vulnerable Software and Affected Versions: General Electric Renewable Energy iNET versions prior to 8.3.0 General Electric Renewable Energy iNET II versions prior to 8.3.0 General Electric Renewable Energy SD versions prior to 6.4.7 General Electric Renewable Energy TD220X versions...