PT-2022-21838 · Samsung · Dex For Pc

Name of the Vulnerable Software and Affected Versions: DeX for PC versions prior to SMR Aug-2022 Release 1 Description: A vulnerability using PendingIntent in DeX for PC allows attackers to access files with system privilege. Recommendations: For DeX for PC versions prior to SMR Aug-2022 Release ...

PT-2022-21835 · Unknown · Wi-Fi Service

Name of the Vulnerable Software and Affected Versions: Wi-Fi Service versions prior to SMR AUG-2022 Release 1 Description: The issue is related to improper access control in the Wi-Fi Service, allowing untrusted applications to manipulate the list of apps that can use mobile data. Recommendations...

PT-2022-21833 · Iccc Ta · Iccc Ta

Name of the Vulnerable Software and Affected Versions: ICCC TA versions prior to SMR Aug-2022 Release 1 Description: The issue is related to an absence of variable initialization, which allows a local attacker to read uninitialized memory. Recommendations: For versions prior to SMR Aug-2022 Relea...

PT-2022-4459

Name of the Vulnerable Software and Affected Versions zlib versions 1.2.12 and earlier MySQL Server versions 5.7.41 and earlier, 8.0.31 and earlier Description The issue is related to a heap-based buffer over-read or buffer overflow in the inflate function of the zlib library, specifically in the...

PT-2022-23971 · Jetbrains · Jetbrains Rider

Name of the Vulnerable Software and Affected Versions: JetBrains Rider versions prior to 2022.2 Description: The issue allows the Trust and Open Project dialog to be bypassed, leading to local code execution. Recommendations: For versions prior to 2022.2, update to version 2022.2 or later to...

PT-2022-17577 · Unknown · Io.Socket:Socket.Io-Client

Name of the Vulnerable Software and Affected Versions: io.socket:socket.io-client versions prior to 2.0.1 Description: The issue is related to a NULL Pointer Dereference that occurs when parsing a packet with an invalid payload format. This can happen in the io.socket:socket.io-client package...

PT-2022-15551 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP WordPress plugin versions prior to 2.21.3 Description: The issue allows attackers to perform a Denial of Service DoS attack on the web server via a Cross-Site Request Forgery CSRF attack. This happens because the plugin lacks CSRF...

PT-2022-15671 · WordPress · Featured Image From Url

Name of the Vulnerable Software and Affected Versions: Featured Image from URL FIFU WordPress plugin versions prior to 4.0.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks when the unfiltered html capability is disallowed, for...

PT-2022-15917 · WordPress · Invitation Based Registrations

Name of the Vulnerable Software and Affected Versions: Invitation Based Registrations WordPress plugin versions 2.2.84 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks when the unfiltered html capability is disallowed,...

PT-2022-22584 · Pyrocms · Pyrocms

Name of the Vulnerable Software and Affected Versions: PyroCMS version 3.9 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. Recommendations: For PyroCMS version 3.9, update to a version that contains a fix for this issue, as the current version is affected by...

PT-2022-22138 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue is related to improper privilege management for storage provider types, which could lead to the disclosure of sensitive information. Recommendations: For...

PT-2022-22181 · Hiby · Hiby R3 Pro

Name of the Vulnerable Software and Affected Versions: Hiby R3 PRO firmware versions 1.5 through 1.7 Description: A file upload issue was found in the file upload feature of the firmware. Recommendations: For versions 1.5 through 1.7, update to a newer version that contains a fix for this issue...

PT-2022-7863 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: Zulip versions prior to 1.3.12 Description: The issue allows bot API keys to be accessible to other users within the same realm. Recommendations: For versions prior to 1.3.12, update to version 1.3.12 or later to resolve the issue...

PT-2022-19122 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local disclosure of sensitive information and a local unauthorized data modification issue were discovered. An unprivileged user could locally exploit this to read and...

PT-2022-18515 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.3-25423 Description: The issue is related to a Path Traversal vulnerability in the webapi component. This allows remote authenticated users to delete arbitrary files. Recommendations: For...

PT-2022-20244 · Booked · Booked

Name of the Vulnerable Software and Affected Versions: Booked versions prior to 3.3 Description: The issue allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having the user access a specially crafted URL. Recommendations: For...

PT-2022-15632 · Synology · Synology Calendar

Name of the Vulnerable Software and Affected Versions: Synology Calendar versions prior to 2.3.4-0631 Description: A Cross-Site Request Forgery CSRF issue in the webapi component allows remote authenticated users to hijack the authentication of administrators via unspecified vectors. This could...

PT-2022-10247 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.641 Description: An issue was discovered in the fill buffer function in stream.c, which results in memory leaks. Recommendations: For lrzip version 0.641, consider updating to a newer version that addresses the memory leak iss...

PT-2022-8895 · Unknown · Conf-Cfg-Ini

Name of the Vulnerable Software and Affected Versions: conf-cfg-ini versions prior to 1.2.2 Description: The issue arises when an attacker submits a malicious INI file to an application that parses it with decode, resulting in prototype pollution on the application. This can be exploited further...

PT-2022-20584 · Openzeppelin · Openzeppelin Contracts

Name of the Vulnerable Software and Affected Versions: OpenZeppelin Contracts versions 4.0.0 through 4.7.1 Description: The issue concerns the ERC165Checker in OpenZeppelin Contracts, which may revert instead of returning false under certain conditions. Specifically, this occurs when a target...