PT-2022-34614 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A race condition issue exists in the ALSA pcm oss component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.9,...

PT-2022-34603 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.8 Description: A potential security issue has been identified in the RDMA/irdma component of the Linux Kernel. The issue is related to a drain SQ hang with no completion. The actual impact and attack...

PT-2022-34583 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.10 Description: The issue is related to the addition of RC code in the cc2520 tx function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-34591 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a use-after-free error in the pcluster component of the erofs filesystem on UP platforms. The actual impact and attack plausibility have not yet been proven...

PT-2022-34706 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue is related to the drm/radeon component in the Linux Kernel. It involves adding a force flush to delay work when radeon is used. The actual impact and attack plausibility have not...

PT-2022-34604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a use-after-free warning in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34680 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: A use-after-free issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.213, update to version...

PT-2022-34674 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: The issue is related to a use-after-free UAF error when detecting digest errors in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34600 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain packet skb remains available after being added to a queue for a child process. Th...

PT-2022-34694 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: The issue is related to the addition of debugfs lookup and remove in debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34712 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.328 Description: The issue is related to an out-of-bounds bug in the snd usb parse audio interface function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34652 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.144 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34708 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: A potential off-by-one overflow issue was identified in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-25621 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 0.12.1 Description: A vulnerability in the LIEF::MachO::SegmentCommand::virtual address function allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. Recommendations: For LIEF...

PT-2022-10580 · WordPress · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro plugin versions = 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited in the Booking Ultra Pro plugin at WordPress...

PT-2022-21794 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a3 Description: The issue is related to the allocation of resources without limits or throttling, allowing users to insert an email longer than 255 characters. If a user signs up with an excessively long email...

PT-2022-25609 · Sourcecodester · Sourcecodester Best Student Result Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Student Result Management System version 1.0 Description: The issue allows for SQL Injection, which can be exploited by attackers. Recommendations: For version 1.0, update to a newer version that contains a fix for this...

PT-2022-21758 · Ikus060 · Rdiffweb

Name of the Vulnerable Software and Affected Versions: ikus060/rdiffweb versions prior to 2.4.9 Description: The issue concerns weak password requirements. Specifically, it allows users to set passwords with all spaces, bypassing password complexity requirements due to a lack of password entropy...

PT-2022-16225 · Ece · Ece

Name of the Vulnerable Software and Affected Versions: ECE versions prior to 3.1.1 Description: A flaw was discovered that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster. Recommendations: For versio...

PT-2022-24840 · Unknown · Matrix-Android-Sdk

Name of the Vulnerable Software and Affected Versions: matrix-android-sdk2 versions prior to 1.5.1 Description: An attacker cooperating with a malicious homeserver can construct messages that appear to have come from another person without any indication. This vulnerability can be used to perform...