PT-2022-26891 · Jenkins · Jenkins Pipeline: Input Step Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Input Step Plugin versions 451.vf1a a 4f405289 and earlier Pipeline: Declarative Plugin versions 2.2114.v2654ca 721309 and earlier Description: The issue arises from the Jenkins Pipeline: Input Step Plugin not restricting or...

PT-2022-14992 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions 9.2.6.4 and prior Description: The issue allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, requiring human interaction from a person other than...

PT-2022-14981 · Oracle · Oracle Communications Billing/Revenue Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Billing and Revenue Management versions 12.0.0.4.0 through 12.0.0.7.0 Description: The issue allows an unauthenticated attacker with network access via TCP to compromise Oracle Communications Billing and Revenue...

PT-2022-5170

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.39 and prior MySQL Server versions 8.0.30 and prior Description The issue is related to insufficient input validation in the Server: Connection Handling component of MySQL Server. This allows a high-privileged attacke...

PT-2022-20334 · Miniorange · Miniorange Discord Integration Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: miniOrange Discord Integration WordPress plugin versions prior to 2.1.6 Description: The issue concerns a lack of authorization and CSRF protection in certain AJAX actions of the plugin, allowing any logged-in user, such as a subscriber, to...

PT-2022-25990 · WordPress · Villatheme Ald - Aliexpress Dropshipping/Fulfillment For Woocommerce

Name of the Vulnerable Software and Affected Versions: Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin version 1.1.0 and earlier Description: The issue concerns sensitive data exposure. The estimated number of potentially affected devices worldwide is not...

PT-2022-26650 · Bentley · Bentley Microstation +1

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation versions prior to 10.17.01.58 Bentley View versions prior to 10.17.01.19 Description: The issue concerns out-of-bounds read and stack overflow problems that occur when opening crafted SKP files. This could lead to...

PT-2022-5197 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S9 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S6 Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S7 Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S7, 19.4R3-S9...

Ubuntu: Security Advisory (USN-5668-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-6421 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.002.20212 and earlier Adobe Acrobat Reader versions 20.005.30381 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Acrobat and Reader, which could lead to disclosure...

PT-2022-7526 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 versions prior to 1.0.11 Description: The issue is related to a heap-buffer-overflow in the mc chroma function within the motion.cc component of the libde265 video codec implementation. This allows attackers to cause a Denial of...

PT-2022-5012 · Unknown · Warpinator

Name of the Vulnerable Software and Affected Versions: Warpinator versions prior to 1.2.15 Description: The issue is related to incorrect link resolution before accessing files, allowing access outside of an intended directory. This can be exploited by a remote attacker to gain unauthorized acces...

PT-2022-34798 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue is related to the block layer in the Linux Kernel, where the nomerges flags are not properly set in the blk cleanup queue function. The actual impact and attack plausibility of th...

PT-2022-34865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.295 Description: A memory leak issue exists when a blob is malformed. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.14.295, upda...

PT-2022-34844 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.146 Description: The issue is related to a null pointer dereference in the efx hard start xmit function. This problem was introduced in version v5.10 and is fixed in version v5.10.146. The actual impact an...

PT-2022-34749 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to the gpiolib, specifically with the cdev and lineevent state::irq. It was introduced in version v5.9 and fixed in version v6.0. The actual impact and attack plausibility...

PT-2022-34740 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to a possible bogus match in the nf osf find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-34791 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: A potential security issue exists due to a failure to return an error code when kmalloc fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34738 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A memory leak issue was discovered in the qlt 24xx handle abts function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34739 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A potential issue exists in the Linux Kernel, specifically in the mm/slab common component, where a possible double free of kmem cache could occur. The actual impact and attack plausibility hav...