PT-2022-21487 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina Description: A memory corruption issue was addressed through improved locking, potentially allowing an app to execute...

PT-2022-21494 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: The issue was addressed with improved memory handling. An app may be able to leak sensitive kernel state. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issu...

DEBIAN-CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

PT-2022-16697 · WordPress · The Visualizer: Tables/Charts Manager For Wordpress

Name of the Vulnerable Software and Affected Versions: The Visualizer: Tables and Charts Manager for WordPress versions up to, and including 3.7.9 Description: The issue concerns deserialization of untrusted input via the remote data parameter. This allows authenticated attackers with contributor...

PT-2022-9060 · Thenify +3 · Thenify +3

Name of the Vulnerable Software and Affected Versions: thenify versions prior to 3.3.1 Description: The issue arises from the lack of sanitization of the name argument provided to the thenify package, which is then passed to the eval function without any sanitization. This allows untrusted user...

PT-2022-15295

Name of the Vulnerable Software and Affected Versions Download Monitor WordPress plugin versions prior to 4.5.91 Description The issue allows high privilege users, such as administrators, to download sensitive files like wp-config.php or /etc/passwd, even in hardened environments or multisite...

PT-2022-20576 · Haproxy +3 · Haproxy +3

Name of the Vulnerable Software and Affected Versions: Roxy-WI versions prior to 6.1.1.0 Description: Roxy-WI is a Web interface for managing HAProxy, Nginx, and Keepalived servers. The system command can be run remotely via the subprocess execute function without processing the inputs received...

Amazon Linux 2 : rust (ALAS-2022-1817)

The version of rust installed on the remote host is prior to 1.61.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1817 advisory. A race condition flaw was found in Rust's std::fs::removedirall function. Rust applications that use this function may be vulnerable ...

PT-2022-15456 · Ibm · Ibm Websphere Application Server Liberty +1

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 22.0.0.7 Open Liberty Description: The issue allows an authenticated user to perform identity spoofing using a specially crafted request. Recommendations: For IBM WebSphere...

PT-2022-3956

Name of the Vulnerable Software and Affected Versions Apache Xalan Java XSLT library versions prior to 2.7.3 Description The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generat...

PT-2025-26042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description A deadlock and link starvation issue in the outgoing data path of the Linux kernel's n gsm implementation has been resolved. The issue occurred due to the hard coupling of the upper and lower...

PT-2022-3933 · Php +4 · Php +4

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1.x below 8.1.8 Description: The issue is related to the implementation of the finfo buffer function in PHP, which can lead to heap corruption due to the incorrect use of a function to free allocated memory. This is caused by a...

CVE-2022-31081 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

PT-2022-14636 · WordPress · Brizy Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Brizy WordPress plugin versions prior to 2.4.2 Description: The issue allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks due to the lack of sanitization and escaping of some element content...

PT-2022-20612 · Unknown +3 · Dbus-Broker +3

Name of the Vulnerable Software and Affected Versions: dbus-broker versions prior to 31 Description: An issue was discovered in dbus-broker where multiple NULL pointer dereferences can occur when a malformed XML config file is supplied. Recommendations: For versions prior to 31, update to version...

PT-2022-20942 · 3S Smart Software Solutions · Codesys Gateway Server

Name of the Vulnerable Software and Affected Versions: CODESYS Gateway Server V2 versions prior to V2.3.9.38 Description: The issue allows an attacker to perform authentication by specifying a small password that matches a part of the longer real CODESYS Gateway password, as only a part of the...

PT-2022-20361 · Unknown · Nukeviet Cms

Name of the Vulnerable Software and Affected Versions: NukeViet CMS versions prior to 4.5.02 Description: The issue is related to a Cross Site Scripting Stored XSS vulnerability. This means that an attacker can inject malicious scripts into the website, which can then be executed by other users. ...

PT-2022-21723 · Powertek +1 · Powertek +1

Name of the Vulnerable Software and Affected Versions: Power Distribution Units running on Powertek firmware versions prior to 3.30.30 Description: The issue allows remote authorization bypass in the web interface. An attacker can exploit this by sending an HTTP packet to the "cgi/get param.cgi"...

PT-2025-31036 · Unknown · Ed25519-Dalek

Name of the Vulnerable Software and Affected Versions: ed25519-dalek crate versions prior to 2 Description: The ed25519-dalek crate for Rust contains a flaw that allows a double public key signing function oracle attack. The Keypair implementation can lead to the extraction of a private key...

PT-2022-7208 · Tiffsplit +6 · Tiffsplit +6

Name of the Vulnerable Software and Affected Versions: Tiffsplit versions 4.4.0 and earlier Description: The issue is related to a stack overflow in the TIFFVGetField function of the LibTIFF library, which can be exploited by an attacker to cause a Denial of Service DoS using a specially crafted...