PT-2022-13734

Name of the Vulnerable Software and Affected Versions livehelperchat versions prior to 3.97 Description This issue has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device. It is being...

PT-2022-16878

Name of the Vulnerable Software and Affected Versions Moment.js versions 1.0.1 through 2.29.1 Description A path traversal vulnerability impacts npm server users of Moment.js, especially if a user-provided locale string is directly used to switch moment locale. This issue allows an unauthenticate...

PT-2022-16268 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.7.0 through 3.10.6 Description: The issue is related to a lack of input validation, which could allow an XSS attack using com fields. Recommendations: For Joomla! versions 3.7.0 through 3.10.6, update to a version that...

PT-2022-4982 · Linux Pam +2 · Linux-Pam +2

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.5.2-6.1 Description: The issue is related to the pam access.so module of the Linux-PAM package, which does not correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS...

PT-2022-2683 · Pjsip +3 · Pjsip +3

Name of the Vulnerable Software and Affected Versions: PJSIP versions prior to 2.12 Description: The issue is related to a denial-of-service condition that can be triggered by an infinite loop during XML parsing. This can allow a remote attacker to cause a denial-of-service. The vulnerability...

PT-2022-17991 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.6.0 Description: The issue allows an attacker to overwrite administrator-writable files by creating a symlink where the installer writes its log file. This can be exploited when the Docker Desktop installer ...

PT-2022-6913 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak versions prior to 17.0.0 Description: A POST based reflected Cross Site Scripting vulnerability has been identified in Keycloak. The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to...

PT-2022-17398 · WordPress · Wordpress Price Table

Name of the Vulnerable Software and Affected Versions: WordPress Price Table plugin versions = 0.2.2 Description: An Authenticated Stored Cross-Site Scripting XSS issue was found in the WordPress Price Table plugin. This issue allows contributors with a higher user role to inject malicious script...

PT-2022-5559 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.9 Description: The issue is related to an assertion failure in the MariaDB Server, specifically in the /row/row0mysql.cc component. This failure can be triggered via the condition node-pcur-rel pos == BTR...

PT-2022-15582 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 macOS Big Sur versions prior to 11.6.5 macOS Monterey versions prior to 12.3 Description: A memory corruption issue was addressed with improved state...

PT-2022-15599 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: An out-of-bounds write issue was addressed with improved bounds checking. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory. Recommendations: For versions...

PT-2022-17760 · Onenav · Onenav

Name of the Vulnerable Software and Affected Versions: OneNav version 0.9.14 Description: An issue in the index.php file allows attackers to perform directory traversal. Recommendations: For OneNav version 0.9.14, update to a version that fixes the issue in index.php to prevent directory traversa...

PT-2022-2060 · Fish +3 · Fish +3

Name of the Vulnerable Software and Affected Versions: fish versions 3.1.0 through 3.3.1 Description: The issue is related to arbitrary code execution. Fish, a command line shell, can run arbitrary commands under an attacker's control when using the default configuration and changing to a directo...

PT-2022-4779 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff versions up to 4.3.0 Description: The issue is related to a null source pointer being passed as an argument to the memcpy function within the TIFFFetchNormalTag function in the tif dirread.c component of the LibTIFF library. This can...

PT-2022-1802 · Terramaster · Terramaster Nas

Name of the Vulnerable Software and Affected Versions: TerraMaster NAS versions prior to 4.2.31 Description: The issue is related to the createRaid module in TerraMaster NAS devices, which allows for the injection of arbitrary commands. This can enable a remote attacker to execute arbitrary code...

PT-2022-13468 · Pypi · Pytorch-Lightning

Name of the Vulnerable Software and Affected Versions: PyTorch Lightning versions prior to 1.6.0 Description: The issue allows for code injection, potentially enabling an attacker to execute commands on the target operating system. This can be achieved by setting the PL TRAINER GPUS variable when...

PT-2022-16262 · Zoho · Zoho Manageengine Desktop Central

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Desktop Central versions prior to 10.1.2137.8 Description: The issue allows the exposure of the installed server name to anyone, enabling the discovery of the internal hostname by reading HTTP redirect responses. This can be...

PT-2022-9672 · Yoast · Yoast Seo

Name of the Vulnerable Software and Affected Versions: Yoast SEO WordPress plugin versions 16.7 through 17.2 Description: The issue discloses the full internal path of featured images in posts via the "wp/v2/posts" REST endpoints, which could help an attacker identify other vulnerabilities or...

PT-2022-13420 · Strapi · Strapi

Name of the Vulnerable Software and Affected Versions: strapi versions prior to 4.1.0 Description: The issue is related to arbitrary command injection in the strapi repository. This occurs due to improper sanitization of user input, specifically when creating a strapi app using the template cli...

PT-2022-10955 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: zulip/zulip versions prior to 4.10 Description: The issue is related to improper access control in the GitHub repository zulip/zulip. Recommendations: For versions prior to 4.10, update to version 4.10 or later to resolve the issue...