CVE-2022-2315 SQL Injection in Database Accreditation System

Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2...

PT-2022-16359 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: The issue allows unsanitized UUIDs to be passed by a rogue agent, leading to log spoofing on the verifier and registrar. Recommendations: For versions prior to 6.3.0, update to version 6.3.0 or lat...

PT-2022-20186 · Tibco Software · Tibco Ebx Add-Ons

Name of the Vulnerable Software and Affected Versions: TIBCO EBX Add-ons versions 5.4.1 and below Description: The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site...

PT-2022-5132 · Arr-Pm · Arr-Pm

Name of the Vulnerable Software and Affected Versions: Arr-pm versions prior to 0.0.12 Description: The issue is related to OS command injection, which can result in shell execution if an RPM contains a malicious payload compressor field. This impacts the extract and files methods of the RPM::Fil...

PT-2022-11822 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: A vulnerability allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to a verifier, potentially leading to remote code execution...

PT-2022-25669

Name of the Vulnerable Software and Affected Versions Zutty versions prior to 0.13 Description The issue allows arbitrary code execution through DECRQSS in text written to the terminal. Recommendations For versions prior to 0.13, update to version 0.13 or later to resolve the issue...

Delta Electronics DIAEnergie

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Delta Electronics Equipment: DIAEnergie Vulnerabilities: Use of Hard-coded Credentials 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory titled...

PT-2022-25536 · Opswat · Opswat Metadefender Icap Server

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender ICAP Server versions prior to 4.13.0 Description: A stored Cross-Site Scripting XSS issue allows attackers to execute arbitrary JavaScript or HTML due to the blocked page response. This enables attackers to potentially...

PT-2022-33861 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential deadlock issue exists in the driver core, specifically in the driver attach function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-34158 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.10.136 Description: A refcount leak was discovered in the meson mx socinfo init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.15...

PT-2022-34555 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue concerns a potential security problem with the ext4 file system, specifically related to handling corrupted directories. The actual impact and likelihood of an attack have not bee...

PT-2022-33944 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v5.15.60 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2022-34026 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to the detection of uninitialized lists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33809 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A use-after-free crash issue was discovered in the dm sm register threshold callback function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33792 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to incorrect bounds checking for stream encoder instances for DCN303 in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2022-33795 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential issue exists where ext4 append may not always allocate a new block. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-33755 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential issue exists due to a lack of proper locking, which could lead to a data race. The actual impact and likelihood of an attack have not been confirmed. Recommendations: For versio...

PT-2022-34089 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A refcount leak bug was discovered in the Linux Kernel, specifically in the fbdev: amba-clcd component. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-34201 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to the i740 calc vclk function in the i740fb module of the Linux Kernel. The problem arises from the lack of proper validation of the argument passed to this function...

PT-2022-34208 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to the RISC-V architecture in the Linux Kernel. It involves the crash kexec function, which has a fast call path that may pose a potential security risk. The actual...