PT-2022-19662 · Schedmd +2 · Schedmd Slurm +2

Name of the Vulnerable Software and Affected Versions: SchedMD Slurm versions 20.11.x through 21.08.x Description: The issue is related to Incorrect Access Control, which can lead to Escalation of Privileges. Recommendations: For SchedMD Slurm versions 20.11.x through 21.08.x, update to a version...

PT-2022-7667 · Realtek · Realtek Rtsuer Driver For Usb Card Reader +1

Name of the Vulnerable Software and Affected Versions: Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355 Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274 Description: The issue is related to a buffer overflow in memory, allowing an attacker ...

OpenLDAP SQLi Vulnerability (May 2022)

OpenLDAP is prone to an SQL injection SQLi vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

PT-2022-16949 · Unknown +1 · Kustomize-Controller +1

Name of the Vulnerable Software and Affected Versions: kustomize-controller versions prior to 0.24.0 flux2 versions prior to 0.29.0 Description: The issue concerns a Path Traversal vulnerability in the kustomize-controller via a malicious kustomization.yaml file, allowing an attacker to expose...

PT-2022-5037 · Hitachi Energy · Hitachi Energy Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: Hitachi Energy MicroSCADA Pro SYS600 versions 9.4 FP2 Hotfix 4 and earlier Hitachi Energy MicroSCADA X SYS600 versions 10 through 10.3.1 Description: The issue is related to an Improper Input Validation vulnerability in the handling of a...

PT-2022-4377 · Google · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on Chrome OS versions prior to 102.0.5005.125 Description: The issue is related to an out of bounds write in the Chrome OS Audio Server, which can potentially lead to heap corruption via crafted audio metadata. This could allow ...

CVE-2022-24888 Possible Injection in Nextcloud Server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1, it is possible to create files and folders that have leading and trailing \n, \r, \t, and \v characters. The server rejects files and folders...

PT-2022-16958 · Nextcloud +1 · Nextcloud Server +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1 Description: The issue allows creating files and folders with leading and trailing , r, t, and v characters. The server rejects these characters when they appear in the...

Design/Logic Flaw

Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Users are advised to update to the current version 6.4.10.1. For older versions of 6.1, 6.2, and 6.3...

PT-2022-13753 · Mcafee · Skyhigh Swg

Name of the Vulnerable Software and Affected Versions: Skyhigh SWG versions 7.x prior to 7.8.2.31 Skyhigh SWG versions 8.x prior to 8.2.27 Skyhigh SWG versions 9.x prior to 9.2.20 Skyhigh SWG versions 10.x prior to 10.2.9 Skyhigh SWG versions 11.x prior to 11.1.3 Description: A URL redirection...

Important: kernel

Issue Overview: Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel CVE-2022-20368 A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user to crash or escalate their privileges on the system...

PT-2022-3048 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.37 and prior MySQL Server versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the Server: Logging component of MySQL Server, allowing a high-privileged attacker with networ...

PT-2022-3955 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 103.0.5060.53 Description: The issue is related to a heap buffer overflow in the WebGL component of Google Chrome, which could be exploited by a remote attacker via a crafted HTML page, potentially leading to...

PYSEC-2022-188

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue...

PT-2022-12957 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 8.1.22 PAN-OS versions prior to 9.0.16 PAN-OS versions prior to 9.1.13 PAN-OS versions prior to 10.0.10 PAN-OS versions prior to 10.1.5 Description: An improper handling of exceptional conditions issue exists in the D...

MariaDB DoS Vulnerability (MDEV-26406) - Windows

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

PT-2022-7059 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.6 and earlier Adobe Photoshop versions 23.2.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...

WordPress Popup Maker plugin <= 1.16.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Roel van Beurden in WordPress Popup Maker plugin versions = 1.16.4. Solution Update the WordPress Popup Maker plugin to the latest available version at least 1.16.5...

KLA20183 Multiple vulnerabilities in Git for Windows

Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Original advisories Git security vulnerability announced Related products Git-for-Windows CVE list CVE-2022-24767 unknown CVE-2022-247...

PT-2022-18342 · Inhand Networks · Inrouter 900

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description: A remote code execution issue was discovered in the config ovpn component. This issue can be triggered by a crafted packet, allowing for potential...