PT-2022-23306 · Airspan · Airvelocity 1500

Name of the Vulnerable Software and Affected Versions: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 Description: The issue allows an attacker with SNMP write abilities to execute commands as root on the eNodeB due to NET-SNMP-EXTEND-MIB being enabled on its snmpd service. This...

PT-2022-22489 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version 8abf6be Description: A global buffer overflow issue was discovered in PNGDec via the inflate fast function at /src/inffast.c. Recommendations: For PNGDec version 8abf6be, consider updating to a newer version that contains a fix...

PT-2022-24264 · Esri · Esri Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS versions prior to 10.9.0 Description: The issue allows an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs because the "sharing/rest/content/features/analyze" endpoint is always accessibl...

PT-2022-24259 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 2.1.0 Description: The issue concerns a Reflect File Download attack. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2022-22912 · Fork · Fork

Name of the Vulnerable Software and Affected Versions: Fork version 5.9.3 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the publish on date Parameter. This issue was patched in version 5.11.0, which means all versions prior to 5.11.0 are affected...

PT-2022-22913 · Fork · Fork

Name of the Vulnerable Software and Affected Versions: Fork version 5.9.3 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the publish on time Parameter. This issue was patched in version 5.11.0, which means all versions prior to 5.11.0 are affected...

PT-2022-21914 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions 3.6.1 and below Description: The issue is related to improper access control in the UI, allowing a remote authenticated attacker to bypass access controls and download reports containing sensitive...

Intel® Connect M Android App Advisory

Summary: A potential security vulnerability in the Intel® Connect Mobile Connect M Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-44470 Description: Incorrect default...

Intel® Support Android App Advisory

Summary: A potential security vulnerability in the Intel® Support Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-27500 Description: Incorrect default permissions for the...

PT-2022-4388 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2019 Update 8 and earlier Adobe FrameMaker versions 2020 Update 4 and earlier Description: The issue is related to a heap-based buffer overflow in Adobe FrameMaker, which could allow an attacker to execute arbitrary...

PT-2022-16382 · WordPress · Wordpress Comments Fields

Name of the Vulnerable Software and Affected Versions: WordPress Comments Fields WordPress plugin versions prior to 4.1 Description: The issue allows high-privileged users to perform Cross-Site Scripting attacks due to the lack of escaping in Field Error Message, even when unfiltered html is...

PT-2022-14679 · WordPress · Directorist

Name of the Vulnerable Software and Affected Versions: Directorist WordPress plugin versions prior to 7.2.3 Description: The issue allows administrators to download plugins from unverified sources, potentially enabling them to run code on the server. This poses a significant risk, particularly in...

PT-2022-16549 · WordPress · Dw Promobar

Name of the Vulnerable Software and Affected Versions: DW Promobar WordPress plugin versions 1.0.0 through 1.0.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks when the unfiltered html capability is disallowed, for example in a...

PT-2022-16570 · WordPress · Thinkific Uploader

Name of the Vulnerable Software and Affected Versions: Thinkific Uploader WordPress plugin versions 1.0.0 and earlier Description: The issue concerns the lack of sanitization and escaping of settings in the plugin, which could allow high-privilege users, such as administrators, to perform Stored...

PT-2022-16075

Name of the Vulnerable Software and Affected Versions Frontend File Manager & Sharing WordPress plugin versions prior to 1.1.3 Description The issue allows users to upload files without proper filtering of file extensions, potentially leading to the upload of malicious code. Recommendations For...

PT-2022-16470 · WordPress · Auto More Tag

Name of the Vulnerable Software and Affected Versions: Auto More Tag WordPress plugin versions prior to 4.0.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks when the unfiltered html capability is disallowed, for example in a...

PT-2022-18239 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: Cockpit versions prior to 2.2.0 Description: The issue is related to insufficient session expiration. The application does not validate requests after password changes, allowing a user to change their account details even after an admin chang...

PT-2022-10583 · Starfish · The Rich Reviews By Starfish

Name of the Vulnerable Software and Affected Versions: Rich Reviews by Starfish plugin versions = 1.9.14 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to delete reviews. Recommendations: For Rich Reviews by Starfish plugin versions = 1.9.14, update to a version higher th...

PT-2022-21849 · Samsung · Samsung Dex For Pc

Name of the Vulnerable Software and Affected Versions: Samsung Dex for PC versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper access control, allowing local attackers to scan and connect to a PC by making an unprotected binder call. Recommendations: For versions...

PT-2022-23638 · Unknown · Gamelauncher

Name of the Vulnerable Software and Affected Versions: Game Launcher versions prior to 6.0.07 Description: The issue allows a local attacker to access app data with user interaction, due to exposure of sensitive information. Recommendations: For versions prior to 6.0.07, update to version 6.0.07 ...