PT-2022-22381 · Datadog +1 · Datadog +2

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.1 through 15.3.5 GitLab CE/EE versions 15.4 through 15.4.4 GitLab CE/EE versions 15.5 through 15.5.2 Description: An issue has been discovered in GitLab CE/EE. A malicious maintainer could exfiltrate a Datadog...

Tenable Nessus < 8.15.6 Multiple Vulnerabilities (TNS-2022-16)

Tenable Nessus Agent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus";...

PT-2022-25229 · WordPress · Advanced Order Export For Woocommerce

Name of the Vulnerable Software and Affected Versions: Advanced Order Export For WooCommerce plugin versions = 3.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to the download of export files. This occurs in the Advanced Order Export For...

KLA20039 Multiple vulnerabilities in Foxit PDF Reader

Use after free vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to cause denial of service. Original advisories Security updates available in Foxit PDF Reader 12.0.2 and Foxit PDF Editor 12.0.2 Exploitation Public exploits exist for this vulnerability...

PT-2022-25233 · A3Rev · A3Rev Software Page View Count Plugin

Name of the Vulnerable Software and Affected Versions: a3rev Software Page View Count plugin versions = 2.5.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to reset the plugin settings. Recommendations: For a3rev Software Page View...

Mageia: Security Advisory (MGASA-2022-0404)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities

Summary IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pa...

CVE-2022-3509 Parsing issue in protobuf textformat

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

CVE-2022-3509

CVE-2022-3509 concerns a parsing issue in protobuf-java (core and lite) textformat that, on inputs with multiple non-repeated embedded messages and repeated/unknown fields, can cause objects to flip between mutable/immutable forms and trigger long GC pauses, enabling a denial-of-service condition...

PT-2022-37580 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions prior to the fixed version Description: The issue is related to several bugs in PHP, including an out-of-bounds read due to insufficient input validation in the imageloadfont function, a buffer overflow in the hash update functio...

PT-2022-18508 · Sick · Sick Sim1004

Name of the Vulnerable Software and Affected Versions: SICK SIM1004 Partnumber 1098148 versions prior to 2.0.0 Description: A password recovery issue allows an unprivileged remote attacker to invoke the password recovery mechanism method, gaining access to the user level defined as...

PT-2022-21796 · Publishpress · Publishpress Capabilities Pro

Name of the Vulnerable Software and Affected Versions: PublishPress Capabilities WordPress plugin versions prior to 2.5.2 PublishPress Capabilities Pro WordPress plugin versions prior to 2.5.2 Description: The issue allows PHP object injection attacks by administrators on multisite WordPress...

Tenable Nessus < 10.4.0 Multiple Vulnerabilities (TNS-2022-21)

Tenable Nessus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus"; ifdescripti...

PT-2022-7577

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0882 Description The issue is related to a use after free error in the did set spelllang function, located in the spell.c file of the Vim text editor. This error occurs when memory is accessed after it has been freed,...

PT-2022-12367 · Unknown · Yordam Library Information Document Automation

Name of the Vulnerable Software and Affected Versions: Yordam Library Information Document Automation product versions prior to 19.02 Description: The issue is related to an unauthenticated information disclosure. No specific details about affected devices or real-world incidents are provided...

PT-2022-21774 · WordPress · Kadence Woocommerce Email Designer

Name of the Vulnerable Software and Affected Versions: Kadence WooCommerce Email Designer WordPress plugin versions prior to 1.5.7 Description: The issue arises from the unserialization of the content of an imported file, potentially leading to PHP object injections when an admin imports a...

PT-2022-26613 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 Description: A race condition was addressed with improved locking, which could allow an app with root privileges to execute arbitrary code with kernel...

PT-2022-26594 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 Description: A race condition issue was addressed through improved locking, which could allow an app to execute arbitrary code with kernel privileges...

PT-2022-25652 · Unknown +1 · Wtviewerefree +1

Name of the Vulnerable Software and Affected Versions: WTViewerE series WTViewerE 761941 versions 1.31 through 1.61 WTViewerEfree versions 1.01 through 1.52 Description: A stack-based buffer overflow issue allows an attacker to cause the product to crash by processing a long file name...

PT-2022-5543 · Owncloud · Owncloud Server

Name of the Vulnerable Software and Affected Versions: ownCloud Server versions prior to 10.11 Description: The issue is related to a misconfiguration in the ownCloud Server Docker image that affects the trusted domains config, making it useless. This could be exploited to spoof the URL in...