PT-2022-34623 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.68 through v5.15.69 Description: A potential security issue exists due to a missing cpus read lock call in the cgroup attach task all function. The actual impact and attack plausibility have not yet been proven...

PT-2022-34663 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A use-after-free warning was identified in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34594 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. The actual impact and attack plausibility have not yet been proven...

PT-2022-34647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A race condition exists in the ALSA pcm oss module. The issue is related to the SNDCTL DSP SYNC control. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-34598 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A potential security issue exists in the netfilter nf tables component. The issue arises when the offload flags check fails, and the hook list is not properly cleaned up. This problem was...

PT-2022-34704 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue is related to an out of bounds access in the snd emu10k1 pcm channel alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34698 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue is related to a use-after-free in the efi capsule write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34617 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a hive reference leak when adding an xgmi device in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34607 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.8 Description: The issue is related to a bitbang fix for lsb-first Rx in the SPI driver. It was introduced in version v5.18 and fixed in version v5.19.9. The actual impact and attack plausibility have...

PT-2022-28238 · Lithium +1 · Lithium +2

Name of the Vulnerable Software and Affected Versions: lithium with Swagger-UI enabled affected versions not specified Description: A XSS vulnerability in the provided Swagger-UI is exploitable in applications, allowing an attacker to gain Remote Code Execution RCE and potentially exfiltrate...

PT-2022-26092 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions through 1.6.0-639 Description: A NULL pointer dereference issue occurs in the AP4 File::ParseStream function, located in Core/Ap4File.cpp, which is called from AP4 File::AP4 File. Recommendations: For versions through 1.6.0-63...

PT-2022-21887 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2022 through 2023 Description: The issue arises when a maliciously crafted file, specifically X B, CATIA, or PDF, is parsed through the software, leading to an out-of-bounds write that can result in arbitrary code...

PT-2022-22164 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 106.0.5249.62 Description: The issue is related to insufficient data validation in the File System API, allowing a remote attacker to bypass File System restrictions via a crafted HTML page. The severity of thi...

Vulnerabilities fixed in WhatsApp

Two vulnerabilities have been fixed in WhatsApp. The vulnerability with reference CVE-2022-36934 allows a remote malicious person to able to execute arbitrary code during a video call. The vulnerability with attribute CVE-2022-27492 allows a remote malicious person to remotely able to execute...

PT-2022-25361 · Kfm · Kfm

Name of the Vulnerable Software and Affected Versions: kfm versions through 1.4.7 Description: A cross-site scripting XSS issue exists, allowing for the execution of malicious scripts via a crafted GET request to the "/kfm/index.php" API endpoint. Recommendations: For versions through 1.4.7, upda...

PT-2022-5166 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.29 and prior Description: The issue exists due to insufficient input validation in the InnoDB component of the MySQL Server. Exploitation of this issue may allow a remote attacker to gain read, modify, add, or delete...

PT-2022-24625 · NetGear · Netgear Wpn824Ext Wifi Range Extender

Name of the Vulnerable Software and Affected Versions: Netgear WPN824EXT WiFi Range Extender versions 1.1.1 through 1.1.9 Description: An exploitable firmware modification issue was discovered, allowing an attacker to conduct a Man-in-the-Middle MITM attack. This attack can modify the user-upload...

PT-2022-33927 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential security issue has been identified in the md-raid10 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-33756 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A memory leak issue exists in the policy dumping functionality of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33744 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a potential buffer overflow in debugfs due to malformed user input. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...