PT-2022-25034 · Samsung · Samsung Kies

Name of the Vulnerable Software and Affected Versions: Samsung Kies versions prior to 2.6.4.22074 Description: The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions. Recommendations: For versions prior t...

PT-2022-23655 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung pass versions prior to 4.0.03.1 Description: The issue is related to improper access control in Samsung pass, allowing physical attackers to access data on a certain state of an unlocked device. Recommendations: For versions prior to...

PT-2022-23933 · Unknown · Wha'S Word Search Puzzles Game Plugin

Name of the Vulnerable Software and Affected Versions: WHA's Word Search Puzzles game plugin version 2.0.1 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with author or higher privileges can inject...

PT-2022-19497 · Appwrite · Appwrite

Name of the Vulnerable Software and Affected Versions: appwrite versions prior to 1.0.0-RC1 Description: The issue is related to stored Cross-site Scripting XSS in the appwrite repository. This type of attack occurs when an application stores user input data without proper validation, allowing an...

PT-2022-23977 · Mickey Kay · Better Font Awesome

Name of the Vulnerable Software and Affected Versions: Mickey Kay's Better Font Awesome plugin versions = 2.0.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

PT-2022-23653 · Unknown · Sdpmm Driver

Name of the Vulnerable Software and Affected Versions: sdpmm driver versions prior to SMR Sep-2022 Release 1 Description: The issue is related to a use after free vulnerability in the sdp mm set process sensitive function of the sdpmm driver. This vulnerability allows attackers to perform malicio...

PT-2022-23186 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 13.10.6 and 14.3 Description: The XWiki Platform Index UI allows storing JavaScript that will be executed by anyone viewing the deleted attachments index with an attachment containing JavaScript in its name...

PT-2022-23187 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 14.0-rc-1 through 14.4-rc-1 Description: The issue allows storing JavaScript in an attachment name, which will be executed by anyone trying to move the corresponding attachment. For example, an attachment with name .jp...

PT-2022-23362 · WordPress · Beaver Builder

Name of the Vulnerable Software and Affected Versions: Beaver Builder plugin versions = 2.5.4.3 Description: The issue is related to a Broken Access Control vulnerability. Recommendations: For Beaver Builder plugin versions = 2.5.4.3, update to a version higher than 2.5.4.3 to resolve the issue...

PT-2022-23130 · Unknown · Reactphp Http

Name of the Vulnerable Software and Affected Versions: ReactPHP HTTP versions 0.7.0 through 1.7.0 Description: The issue arises when ReactPHP's HTTP server component processes incoming HTTP cookie values, url-decoding the cookie names. This can lead to confusion between cookies with prefixes like...

PT-2022-14053 · Okta · Okta Active Directory Agent

Name of the Vulnerable Software and Affected Versions: Okta Active Directory Agent versions 3.8.0 through 3.11.0 Description: The issue arises from the Okta Active Directory Agent installing the Okta AD Agent Update Service using an unquoted path, which can lead to privilege escalation...

PT-2022-16249 · WordPress · Directorist

Name of the Vulnerable Software and Affected Versions: Directorist WordPress plugin versions prior to 7.3.1 Description: The issue concerns the disclosure of email addresses of all users through an AJAX action. This action is accessible to both unauthenticated and any authenticated users...

PT-2022-18573 · WordPress · Fast Flow Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Fast Flow WordPress plugin versions prior to 1.2.13 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in...

PT-2022-12209 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions through 5.0.0 Description: The issue allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the...

PT-2022-12293 · Unknown · Oliver V5 Library Server

Name of the Vulnerable Software and Affected Versions: Oliver v5 Library Server versions prior to 5.00.008.053 Description: The issue allows for arbitrary file download by an attacker using unsanitized user-supplied input via the FileServlet function. Recommendations: For versions prior to...

PT-2022-20256 · Unknown · Rosariosis

Name of the Vulnerable Software and Affected Versions: rosariosis versions prior to 8.9.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing an attacker to inject malicious scripts. This ca...

PT-2022-23039 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop module versions prior to 5.0.2 Description: The issue allows an attacker to steal an administrator's cookie, potentially leading to unauthorized access. The problem is related to improper neutralization of input during web page...

PT-2022-4667 · Unknown · Device Software Manager

Name of the Vulnerable Software and Affected Versions: Device Software Manager versions prior to 2.20.3.0 Description: The issue is related to an untrusted search path vulnerability in the installer of Device Software Manager. This vulnerability can be exploited by an attacker to gain privileges...

PT-2022-13672 · WordPress · Leaflet Maps Marker

Name of the Vulnerable Software and Affected Versions: Leaflet Maps Marker WordPress plugin versions prior to 3.12.5 Description: The issue concerns the improper sanitization of certain parameters before they are inserted into SQL queries. This could allow high privilege users to perform SQL...

PT-2022-17253 · WordPress · Wp Hide & Security Enhancer

Name of the Vulnerable Software and Affected Versions: WP Hide & Security Enhancer WordPress plugin versions prior to 1.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly escaped before being outputted back in an attribut...