PT-2022-25634 · Unknown · Securestation

Name of the Vulnerable Software and Affected Versions: Secustation versions V2.3.4.1301-M20-TSA-B20150617A through V2.5.5.3116-S50-SMA-B20190723A Secustation version V2.5.5.3116-S50-RXA-B20180502A Secustation version V2.5.5.3116-S50-SMB-B20161012A Secustation version V2.3.4.2103-S50-NTD-B20170508...

PT-2022-25109 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: Calendar versions prior to 11.6.08.0 in Android Q10 Calendar versions prior to 12.2.11.3000 in Android R11 Calendar versions prior to 12.3.07.2000 in Android S12 Calendar versions prior to 12.4.02.0 in Android T13 Description: The issue is...

PT-2022-22793

Name of the Vulnerable Software and Affected Versions Testimonials WordPress plugin versions prior to 2.7 super-testimonial-pro WordPress plugin versions prior to 1.0.8 Description The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks, even when the...

PT-2022-5391

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to 10.0.10240.19567 Microsoft Windows 10 1507 versions prior to 10.0.10240.19567 Microsoft Windows 10 1607 versions prior to 10.0.14393.5501 Microsoft Windows 10 1809 versions prior to 10.0.17763.3650 Microsoft...

PT-2022-5621

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions prior to the fixed version Microsoft Office versions prior to the fixed version Microsoft 365 Apps for Enterprise versions prior to the fixed version Microsoft Office Excel 2019 x86 - version 2207, build 15427.20210...

PT-2022-23073

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description TensorFlow is an open source platform for machine learning. If...

PT-2022-23731 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...

PT-2022-4181 · Asustor · Asustor Data Master

Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 3.5.9.RUE3 and below ASUSTOR Data Master ADM versions 4.0.5.RVI1 and below ASUSTOR Data Master ADM versions 4.1.0.RJD1 and below Description: A stack-based buffer overflow vulnerability was found in ASUSTOR Da...

PT-2022-3672 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 17.2.1 and earlier Adobe InDesign versions 16.4.1 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user...

PT-2022-15573 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 macOS Monterey versions prior to 12.3 watchOS versions prior to 8.5 Description: A person with physical access to an iOS device may be able to see sensitive...

PT-2021-5968 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 22.0 and earlier and 15.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Premiere Pro that could lead to disclosure of sensitive memory. An attacker could leverage...

PT-2021-6312

Name of the Vulnerable Software and Affected Versions Microsoft Office Graphics versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Word versions affected versions not specified Description The issue is related to incorrect...

CVE-2021-44515

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...

PT-2021-4365 · Llhttp +6 · Llhttp +6

Name of the Vulnerable Software and Affected Versions: llhttp versions prior to 2.1.4 llhttp versions prior to 6.0.6 Description: The issue is related to the parser in llhttp, which accepts requests with a space right after the header name before the colon, leading to HTTP Request Smuggling HRS...

ROS-2-2154

2.2154 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotel...

PT-2021-22509 · Netmodule · Netmodule Nb1600 +14

Name of the Vulnerable Software and Affected Versions: NetModule NB800 versions prior to 4.3.0.113 NetModule NB1600 versions prior to 4.4.0.111 NetModule NB1601 versions prior to 4.4.0.111 NetModule NB1800 versions prior to 4.4.0.111 NetModule NB1810 versions prior to 4.4.0.111 NetModule NB2700...

PT-2021-5821 · Node.Js +7 · Node.Js +7

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 12.22.4 Node.js versions prior to 14.17.4 Node.js versions prior to 16.6.0 Description: The issue is related to a use after free attack in Node.js, where an attacker might exploit memory corruption to change process...

PT-2021-2536 · Apple · Webkit +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 12.5.2 Apple iOS versions prior to 14.4.2 Apple iPadOS versions prior to 14.4.2 Apple watchOS versions prior to 7.3.3 Description: This issue is related to the WebKit module in Apple's operating systems, which may...

Actively exploited vulnerabilities fixed in SolarWinds Orion

SolarWinds reports active misuse of SolarWinds Orion. Through a still unknown method, a version of Orion was distributed between March and June 2020 distributed, which appears to contain a Trojan. It concerns the versions 2019.4 HF 5 through 2020.2.1. The manipulated versions are abused by...

PT-2020-20876 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: An authorization issue was addressed with improved state management. A malicious application may be able to re...