PT-2022-19863 · Mitsubishi · Gx Works3

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation GX Works3 versions 1.015R and later Description: The issue allows a remote unauthenticated attacker to disclose sensitive information, enabling unauthenticated users to access MELSEC safety CPU modules illegall...

PT-2022-26000 · Unknown · Accessibility Plugin

Name of the Vulnerable Software and Affected Versions: Accessibility plugin versions prior to 1.0.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions prior to 1.0.4, upda...

PT-2022-27292 · Unknown · Creative Mail

Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions prior to 1.5.5 Description: The issue concerns Multiple Cross-Site Request Forgery CSRF vulnerabilities. Recommendations: For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue...

PT-2022-26005 · WordPress · Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: Quiz And Survey Master plugin versions 7.3.10 and earlier Description: A bypass vulnerability exists in the Quiz And Survey Master plugin for WordPress. Recommendations: For versions 7.3.10 and earlier, update to a version later than 7.3.10 t...

PT-2022-26118

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier Description TensorFlow is an open source platform for machine learning. The tf.keras.losses.poisson function receives a y pred and y...

PT-2022-24801 · Hashicorp +1 · Hashicorp Consul +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions 1.13.0 through 1.13.3 Description: The issue concerns a lack of filtering for cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. This affects HashiCorp...

PT-2022-35451 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v5.10.152. The actual impac...

PT-2022-35243 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns the recognition of a trial period in the Linux Kernel. It was introduced in version v4.18 and fixed in version v5.15.76. The actual impact and attack plausibility have no...

PT-2022-35162 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A memory leak issue was discovered in the nvmem register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35401 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns the handling of real but unexpected device interrupts in the i2c designware component. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-35769 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A refcount leak was discovered in the xvip graph dma init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34977 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the soundwire cadence, where msg-buf is overwritten during write commands. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-21947 · Insyde · Nvmexpressdxe

Name of the Vulnerable Software and Affected Versions: NvmExpressDxe driver versions prior to kernel 5.2: 05.27.25 NvmExpressDxe driver versions prior to kernel 5.3: 05.36.25 NvmExpressDxe driver versions prior to kernel 5.4: 05.44.25 NvmExpressDxe driver versions prior to kernel 5.5: 05.52.25...

PT-2022-35260 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A bug in the musb gadget.c file causes an rxstate overflow. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.75,...

PT-2022-35191 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It was introduced in version v2.6.21 and fixed in version v6.0.1. The actual impact and attack plausibility hav...

PT-2022-35247 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically with the ahci module. The actual impact and attack plausibility have not yet been proven...

PT-2022-35171 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the handling of real but unexpected device interrupts in the i2c designware component. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35631 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue concerns a rate rounding problem in the zynqmp pll round rate function of the Linux Kernel, specifically affecting the zynqmp pll. The actual impact and potential for attack have...

PT-2022-20918 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 8.0 through 9.2 LTS Description: The issue allows an authenticated and authorized user to cause a denial of service to the MQTT channels. Recommendations: For IBM MQ versions 8.0 through 9.2 LTS, update to a version that...

PT-2022-27286 · Prestashop · Eu Cookie Law Gdpr

Name of the Vulnerable Software and Affected Versions: EU Cookie Law GDPR Banner + Blocker module for PrestaShop version 2.1.3 and earlier Description: The issue allows SQL Injection via a cookie, specifically lgcookieslaw or lglaw. This can potentially lead to unauthorized access to sensitive...