PT-2022-34594 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. The actual impact and attack plausibility have not yet been proven...

PT-2022-34616 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to the drm/radeon component, where a force flush is added to delay work. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34623 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.68 through v5.15.69 Description: A potential security issue exists due to a missing cpus read lock call in the cgroup attach task all function. The actual impact and attack plausibility have not yet been proven...

PT-2022-26092 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions through 1.6.0-639 Description: A NULL pointer dereference issue occurs in the AP4 File::ParseStream function, located in Core/Ap4File.cpp, which is called from AP4 File::AP4 File. Recommendations: For versions through 1.6.0-63...

PT-2022-28238 · Lithium +1 · Lithium +2

Name of the Vulnerable Software and Affected Versions: lithium with Swagger-UI enabled affected versions not specified Description: A XSS vulnerability in the provided Swagger-UI is exploitable in applications, allowing an attacker to gain Remote Code Execution RCE and potentially exfiltrate...

PT-2022-21887 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2022 through 2023 Description: The issue arises when a maliciously crafted file, specifically X B, CATIA, or PDF, is parsed through the software, leading to an out-of-bounds write that can result in arbitrary code...

PT-2022-22164 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 106.0.5249.62 Description: The issue is related to insufficient data validation in the File System API, allowing a remote attacker to bypass File System restrictions via a crafted HTML page. The severity of thi...

Vulnerabilities fixed in WhatsApp

Two vulnerabilities have been fixed in WhatsApp. The vulnerability with reference CVE-2022-36934 allows a remote malicious person to able to execute arbitrary code during a video call. The vulnerability with attribute CVE-2022-27492 allows a remote malicious person to remotely able to execute...

PT-2022-25361 · Kfm · Kfm

Name of the Vulnerable Software and Affected Versions: kfm versions through 1.4.7 Description: A cross-site scripting XSS issue exists, allowing for the execution of malicious scripts via a crafted GET request to the "/kfm/index.php" API endpoint. Recommendations: For versions through 1.4.7, upda...

PT-2022-24625 · NetGear · Netgear Wpn824Ext Wifi Range Extender

Name of the Vulnerable Software and Affected Versions: Netgear WPN824EXT WiFi Range Extender versions 1.1.1 through 1.1.9 Description: An exploitable firmware modification issue was discovered, allowing an attacker to conduct a Man-in-the-Middle MITM attack. This attack can modify the user-upload...

PT-2022-5166 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.29 and prior Description: The issue exists due to insufficient input validation in the InnoDB component of the MySQL Server. Exploitation of this issue may allow a remote attacker to gain read, modify, add, or delete...

PT-2022-33891 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the imx-jpeg media component, specifically regarding the alignment of buffer size. The actual...

PT-2022-34221 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to the gadgetfs ep io, where it waits until IRQ finishes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33744 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a potential buffer overflow in debugfs due to malformed user input. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34577 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to a null dereference in the nf tables component of the netfilter framework. This problem was introduced in version v3.16 and is fixed in version v4.9.326. The actual...

PT-2022-33866 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A refcount leak was discovered in the bcm4908 partitions fw offset parser. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-33749 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to an overflow implicit truncation warning in the drm/meson component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33764 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue concerns error handling during reset. It was introduced in version v4.14 and fixed in Linux Kernel version v5.15.63. The actual impact and attack plausibility have not yet been...

PT-2022-33927 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential security issue has been identified in the md-raid10 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-34247 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A potential security issue has been identified in the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...