PT-2022-24568 · Airties · Airties Smart Wi-Fi

Name of the Vulnerable Software and Affected Versions: Airties Smart Wi-Fi versions prior to 2020-08-04 Description: The issue allows attackers to change the main/guest SSID and the PSK to arbitrary values and map the LAN due to Insecure Direct Object Reference. Recommendations: For versions prio...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2022-5087 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.13.0 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this by convincing a victim to visit a specially crafted URL referencing...

PT-2022-24356 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF versions prior to 53bf680ef494a835e2c4a5de328ca85416a03a5a Description: A heap-buffer overflow was discovered in the component /core/CorePrPsInfo.tcc. The issue affects LIEF and is related to a heap-buffer overflow, which can be exploite...

PT-2022-5073 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS version 9.1.0 Description: The issue is related to the use of unsafe string functions to process user input in several commands, which can lead to stack-based buffer overflows. This...

PT-2022-5070 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 8.2.0cbn5 Brocade Fabric OS versions prior to 7.4.2.j Description: The issue i...

PT-2022-24804 · Unknown · Matrix-Appservice-Irc

Name of the Vulnerable Software and Affected Versions: matrix-appservice-irc versions prior to 0.35.0 Description: The issue allows attackers to specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them ...

PT-2022-5080 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation ...

PT-2022-5082 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Illustrator, which could lead to the disclosure of sensitive memory. An attacker could levera...

PT-2022-24380 · Safe · Fme Server

Name of the Vulnerable Software and Affected Versions: Safe Software FME Server versions prior to v2022.0.1.1 Description: The issue allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery SSRF attacks due to a XML External Entity XXE vulnerability...

PT-2022-12119 · Anydesk · Anydesk

Name of the Vulnerable Software and Affected Versions: AnyDesk versions prior to 6.2.6 AnyDesk versions 6.3.x prior to 6.3.5 Description: An issue allows the upload of an arbitrary file to a victim's local /Downloads/ directory without approval or action taken by the victim. This occurs when the...

PT-2022-25349 · Sysaid · Sysaid Help Desk

Name of the Vulnerable Software and Affected Versions: SysAid Help Desk versions prior to 22.1.65 Description: The issue allows for XSS via the Linked SRs field. Recommendations: For versions prior to 22.1.65, update to version 22.1.65 or later to resolve the issue. As a temporary workaround,...

PT-2022-25348 · Sysaid · Sysaid Help Desk

Name of the Vulnerable Software and Affected Versions: SysAid Help Desk versions prior to 22.1.65 Description: The issue allows for XSS in the Password Services module. Recommendations: For versions prior to 22.1.65, update to version 22.1.65 or later to resolve the issue...

PT-2022-17642 · Unknown · Com.Diffplug.Gradle:Goomph

Name of the Vulnerable Software and Affected Versions: com.diffplug.gradle:goomph versions prior to 3.37.2 Description: This issue allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locations on the file system. Overwriting...

PT-2022-23326 · Unknown · Culture Object

Name of the Vulnerable Software and Affected Versions: Culture Object plugin versions prior to 4.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into the...

PT-2022-23654 · Unknown · Callbgprovider

Name of the Vulnerable Software and Affected Versions: CallBGProvider versions prior to SMR Sep-2022 Release 1 Description: A path traversal issue allows an attacker to overwrite arbitrary files with the phone's user ID. Recommendations: For versions prior to SMR Sep-2022 Release 1, update to the...

PT-2022-25033 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 Description: The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions. Recommendations: For versions prior ...

PT-2022-23659 · Iva Ctl · Iva Ctl

Name of the Vulnerable Software and Affected Versions: iva ctl driver versions prior to SMR Sep-2022 Release 1 Description: A use after free issue in the iva ctl driver allows an attacker to cause a memory access fault. Recommendations: For versions prior to SMR Sep-2022 Release 1, update to SMR...

PT-2022-25035 · Samsung · Smart Switch Pc

Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 3 Description: The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 4.3.22083 3, update to version 4.3.22083 3 or late...

PT-2022-23665 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Sep-2022 Release 1 Description: The issue concerns a custom permission misuse vulnerability. This vulnerability allows an attacker to use some protected functions with SystemUI privilege. Recommendations: For...