PT-2022-4937 · Isc +12 · Bind +12

Name of the Vulnerable Software and Affected Versions: BIND versions prior to the fixed version Description: The issue is related to a flaw in the DNSSEC implementation of the BIND DNS server, specifically with the incorrect verification of the EdDSA cryptographic signature. This can be exploited...

PT-2022-5155 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...

PT-2022-23982 · Galerio & Urda · Better Delete Revision

Name of the Vulnerable Software and Affected Versions: Galerio & Urda's Better Delete Revision plugin version 1.6.1 and earlier Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious...

PT-2022-37521 · Clamav · Clamav

Name of the Vulnerable Software and Affected Versions: clamav versions prior to 0.103.7 Description: The issue is related to the clamav software, where an update to version 0.103.7 fixes several problems, including the upgrade of the UnRAR library to version 6.1.7, a fix for the logical signature...

PT-2022-16836 · WordPress · Wp-Useronline

Name of the Vulnerable Software and Affected Versions: WP-UserOnline plugin for WordPress versions up to, and including, 2.87.6 Description: The issue is related to Stored Cross-Site Scripting via the templatesbrowsingpagetext parameter due to insufficient input sanitization and output escaping...

PT-2022-20658 · Unknown · Jgraph/Drawio

Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 20.2.8 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.2.8, update to version 20.2.8 or lat...

PT-2022-23631 · Callrail · Callrail Phone Call Tracking Plugin

Name of the Vulnerable Software and Affected Versions: CallRail Phone Call Tracking plugin versions = 0.4.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that leads to Stored Cross-Site Scripting XSS. This means an attacker can trick a user into performing unintended...

PT-2022-6767 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 105.0.5195.52 Description: The issue is related to type confusion in the MathML component of Google Chrome, which can be exploited by a remote attacker to potentially cause a denial of service or execute...

PT-2022-20022 · Unknown · Arnoldaldrin/Binaries

Name of the Vulnerable Software and Affected Versions: arnoldaldrin/binaries versions prior to 1 Description: A stack-based buffer overflow issue has been identified. Recommendations: For versions prior to 1, update to version 1 or later to resolve the issue...

PT-2022-23880 · Unknown · Zlmediakit

Name of the Vulnerable Software and Affected Versions: ZLMediaKit versions below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327 Description: An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Recommendations: For versions below commit...

PT-2022-24390 · Aviatrix · Aviatrix Gateway

Name of the Vulnerable Software and Affected Versions: Aviatrix Gateway versions prior to 6.6.5712 Aviatrix Gateway versions 6.7.x prior to 6.7.1376 Description: An issue was discovered in Aviatrix Gateway where Gateway API functions mishandle authentication. This allows an authenticated VPN user...

PT-2022-23644 · Samsung · Samsung Update Setup

Name of the Vulnerable Software and Affected Versions: Samsung Update Setup versions prior to 2.2.9.50 Description: The issue allows attackers to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 2.2.9.50, update to version 2.2.9.50 or later to...

PT-2022-18521 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 7.0.1-42218-3 Description: The issue is related to improper neutralization of special elements used in an OS command, also known as 'OS Command Injection'. This allows remote authenticated...

go-toolset and golang security and bug fix update

An update is available for golang, go-toolset. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming language tools and librarie...

PT-2022-15364 · Ibm · Ibm Datapower Gateway

Name of the Vulnerable Software and Affected Versions: IBM Datapower Gateway versions 10.0.1.0 through 10.0.1.5 IBM Datapower Gateway versions 10.0.2.0 through 10.0.4.0 IBM Datapower Gateway versions 2018.4.1.0 through 2018.4.1.18 Description: The issue is related to insufficient authorization...

PT-2022-22013 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase version 1.11.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the parameter dataSourceId. There is no information about the estimated number of potentially affected devices worldwide or real-world...

PT-2022-19633 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.2.0 through 5.5.1 Description: The issue allows a remote authenticated attacker to obtain some address data. Recommendations: For Cybozu Garoon versions 4.2.0 through 5.5.1, update to a version that contains a fix for...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

PT-2022-21949

Name of the Vulnerable Software and Affected Versions got package versions prior to 12.1.0 got package versions prior to 11.8.5 Description The issue allows a redirect to a UNIX socket. This is related to the got package for Node.js. Recommendations For versions prior to 12.1.0, update to version...

PT-2022-3522 · Automationdirect · C-More Ea9 Ea9-T7Cl +8

Name of the Vulnerable Software and Affected Versions: AutomationDirect DirectLOGIC versions prior to 6.73 AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73 AutomationDirect C-more EA9 EA9-T6CL-R versions prior to 6.73 AutomationDirect C-more EA9 EA9-T7CL versions prior to 6.73...