PT-2022-36207 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: A memory leak issue was discovered in the ipc wwan dellink function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-36376 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: The issue is related to a memory leak in the nfs4 module. It was introduced in version v3.12 and fixed in version v5.10.154. The actual impact and attack plausibility have not yet been...

PT-2022-26930 · WordPress · Wordpress Popular Posts

Name of the Vulnerable Software and Affected Versions: WordPress Popular Posts versions 6.0.5 and earlier Description: The issue allows external initialization of trusted variables or data stores, enabling the acceptance of untrusted external inputs to update internal variables. This can lead to...

PT-2022-23685

Name of the Vulnerable Software and Affected Versions HTML Forms WordPress plugin versions prior to 1.3.25 Description The issue is related to a SQL injection that occurs because a parameter is not properly escaped before being used in a SQL statement. This can be exploited by high privilege user...

PT-2022-6499 · Abb · Abb Rccmd

Name of the Vulnerable Software and Affected Versions: ABB RCCMD versions prior to 4.40 230207 Description: The issue is related to the use of default passwords in the ABB RCCMD client-server application for managing uninterruptible power supplies. This could allow a remote attacker to execute...

OPENSUSE-SU-2022:10207-1 Security update for tumbler

This update for tumbler fixes the following issues: tumbler was updated to version 4.16.1 boo1205210 gst-thumbnailer: Add mime type check gxoxfce/tumbler65 desktop-thumbnailer: Guard against null path Fix typo in gthread version gxoxfce/tumbler!14...

PT-2022-25288 · WordPress · Bp Better Messages

Name of the Vulnerable Software and Affected Versions: Better Messages plugin versions = 1.9.10.69 Description: The issue is related to an authentication bypass vulnerability in the Better Messages plugin for WordPress, specifically affecting messaging block functionality for subscribers and abov...

PT-2022-6567

Name of the Vulnerable Software and Affected Versions Python Packaging Authority PyPA setuptools versions 65.3.0 through 65.5.0 Description The issue is related to insufficient input validation when processing HTML content, allowing remote attackers to cause a denial of service via crafted HTML i...

HPESBNW04383 rev.1 - Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches, Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OfficeConnect 1820 8G Switch J9979A - Prior to PT.02.14 HPE OfficeConnect 1820 8G PoE+ 65W Switch J9982A - Prior to PT.02.14 HPE OfficeConnect 1820 24G Switch J9980A - Prio...

PT-2022-35083 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A refcount leak bug was found in the pl353 smc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.3,...

PT-2022-6949 · Openldap2 · Openldap2

Name of the Vulnerable Software and Affected Versions: openldap2 versions prior to 2.6.3-404.1 Description: The issue is related to an Untrusted Search Path vulnerability in openldap2, which allows local attackers with control of the ldap user or group to change ownership of arbitrary directory...

postgresql:12 security update

postgresql 12.12-1 - Resolves: 2131177 - Update to version 12.12...

SUSE-SU-2022:3765-1 Security update for grafana

This update for grafana fixes the following issues: Updated to version 8.3.10 jscSLE-24565, jscSLE-23422, jscSLE-23439: - CVE-2022-31097: Fixed XSS vulnerability in the Unified Alerting bsc1201535. - CVE-2022-31107: Fixed OAuth account takeover vulnerability bsc1201539. - CVE-2022-21702: Fixed XS...

PT-2022-26904 · Jenkins · Credentials Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Katalon Plugin versions 1.0.32 and earlier Description: The issue concerns the storage of API keys in an unencrypted manner within job config.xml files on the Jenkins controller. These keys can be accessed by users with Extended Read...

PT-2022-26682 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.5.0 Description: An issue was discovered in wolfSSL that allows a fault injection attack on RAM via Rowhammer, leading to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in...

PT-2022-8040 · Paint.Net · Paint.Net

Name of the Vulnerable Software and Affected Versions: Paint.NET versions prior to 4.1.2 Description: The issue allows deserialization of untrusted data. Recommendations: For versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue...

PT-2022-34641 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A potential issue exists in the Linux Kernel, related to a dentry leak in update sched domain debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-21434 · Unknown · Ikus060/Minarca

Name of the Vulnerable Software and Affected Versions: ikus060/minarca versions prior to 4.2.2 Description: The issue concerns weak password requirements in the GitHub repository ikus060/minarca. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

PT-2022-25744 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.134 and earlier Description: The issue results from the plugin not escaping configuration options of the Execute NetStorm/NetCloud Test build step, leading to a stored...

PT-2022-34464 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.292 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves a check for NULL in the rose loopback neigh-loopback variable. The actual impact and attack...