Fedora: Security Advisory for golang-entgo-ent (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-22932 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.5-2 Description: The issue arises from a bug in the communication handling between the client and server, allowing a registered client to send messages claiming to come from another client ID. Additionally, ...

PT-2022-23745 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...

PT-2022-23733 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...

PT-2022-7842 · WordPress · Mb.Miniaudioplayer

Name of the Vulnerable Software and Affected Versions: WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files version 1.7.6 WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files versions prior to 1.7.6 Description: The WordPress Plugin...

PT-2022-5004 · Hitachi Energy · Hitachi Energy Msm

Name of the Vulnerable Software and Affected Versions: Hitachi Energy MSM versions V2.2 and prior Description: A vulnerability exists in the HTTP web interface where it does not validate data in an HTTP header, leading to a possible HTTP response splitting. This could allow an attacker to channel...

PT-2022-21766

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The Deserialization of Untrusted Data issue allows a remote unauthenticated attacker to execute arbitrary malicious...

PT-2022-21469 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: A logic issue was addressed with improved checks, allowing an app to potentially bypass Privacy preferences. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the...

PT-2022-21484 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Security Update 2022-005 Catalina macOS Big Sur versions prior to 11.6.8 macOS Monterey versions prior to 12.5 Description: The issue allows an app to potentially overwrite arbitrary files due to inadequate file...

Amazon Corretto Java 17.x < 17.0.4.8.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 17 17.0.4.8.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-17-2022-Jul-19 advisory. - hotspot/compiler CVE-2022-21540 - hotspot/runtime CVE-2022-21541 - core-libs/java.util...

Important: java-11-amazon-corretto

Issue Overview: Generated code produced by C1 may leak a package-private class to a class from a different package. CVE-2022-21540 MethodHandle.invokeBasic method can be accessed on byte code level from an arbitrary class. CVE-2022-21541 The Xalan Java XSLT library has an integer truncation issue...

PT-2022-3771 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.29 and prior Description: The issue is related to errors in resource release in the Server: Stored Procedure component of Oracle MySQL Server. It allows a high-privileged attacker with network access via...

PT-2022-14189 · WordPress · Button Widget Smartsoft

Name of the Vulnerable Software and Affected Versions: The Button Widget Smartsoft plugin for WordPress versions up to, and including, 1.0.1 Description: The issue is due to missing nonce validation on the smartsoftbutton settings page, making it possible for unauthenticated attackers to update t...

PT-2022-17529 · Best Practical · Request Tracker

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions prior to 5.0.3 Description: The issue is an Open Redirect that occurs via a ticket search. This means that an attacker could potentially redirect users to unintended locations, which could lead to...

CVE-2022-29187

Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when...

PT-2022-21821 · Calendar · Calendar

Name of the Vulnerable Software and Affected Versions: Calendar versions prior to 12.3.05.10000 Description: The issue allows an attacker to access the calendar schedule without the required READ CALENDAR permission, potentially exposing sensitive information. Recommendations: For versions prior ...

PT-2022-21818 · Samsung · Knox Guard

Name of the Vulnerable Software and Affected Versions: Knoxguard versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to disable the keyguard and bypass the Knoxguard lock by performing a factory reset...

PT-2022-16189 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.20 Description: The issue allows for authentication bypass by spoofing, potentially enabling unauthorized access. It is related to business logic errors in the login mechanism. Specifically, the log...

Fedora: Security Advisory for golang-github-twitchtv-twirp (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-5175 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...