CVE-2022-4285

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev593-g007bf61a0, which stems from...

Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities

Thousands of Citrix Application Delivery Controller ADC and Gateway endpoints remain vulnerable to two critical security flaws disclosed by the company over the last few months. The issues in question are CVE-2022-27510 and CVE-2022-27518 CVSS scores: 9.8, which were addressed by the virtualizati...

PT-2022-8015 · Challenge Website +2 · Challenge Website +1

Name of the Vulnerable Software and Affected Versions: challenge website affected versions not specified Description: A critical issue affects some unknown processing, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no informatio...

PT-2022-37539 · Unknown · Supportutils

Name of the Vulnerable Software and Affected Versions: supportutils affected versions not specified Description: The issue concerns the removal of passwords from certain files, including email.txt, updates.txt, and fs-iscsi.txt. This is a security fix to prevent potential exposure of sensitive...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

IBM Business Automation Workflow Information Disclosure Vulnerability

IBM Business Automation Workflow is a workflow automation solution from IBM in the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.An information disclosure vulnerability exists in multiple...

CVE-2022-38710

IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292...

CVE-2022-35279

"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."...

CVE-2022-38710

IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292...

PT-2022-22681 · Ibm · Ibm Business Automation Workflow

Name of the Vulnerable Software and Affected Versions: IBM Business Automation Workflow versions 18.0.0.0 through 22.0.1 Description: The issue could disclose sensitive version information to authenticated users, which could be used in further attacks against the system. Recommendations: For...

PT-2022-25329 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The application was vulnerable to a session fixation that could be used to hijack accounts. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2022-5965 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...

PT-2022-33534 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.17 through v5.19.1 Description: The issue is related to incorrect dev tracker usage in ax25. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.17 and fixed in Linux...

SuiteCRM authenticated SQL injection in export functionality

This module exploits an authenticated SQL injection in SuiteCRM in versions before 7.12.6. The vulnerability allows an authenticated attacker to send specially crafted requests to the export entry point of the application in order to retrieve all the usernames and their associated password from t...

AeroCMS 代码问题漏洞

AeroCMS is a content management system from AeroCMS Inc. in the United States. A security vulnerability exists in AeroCMS version v0.0.1. An attacker exploited the vulnerability to upload a webshell and take control of the web server...

PT-2022-25317 · Samsung · Tizenrt

Name of the Vulnerable Software and Affected Versions: Samsung TizenRT versions through 3.0 GBM Samsung TizenRT version 3.1 PRE Description: An issue was discovered that leads to a denial of service, resulting in a malfunction. The problem is caused by a missing check on the return value of pcap...

Additional Lifecycle Information for Receiver for Mac

This article is a supplement to theLifecycle Milestones for Citrix Workspace App and Citrix Receiver . It provides additional details on End of Maintenance and End of Support dates for the listed versions of Citrix Receiver for Mac. Additional Lifecycle Information for Receiver for Mac Receiver f...

PT-2022-4424 · Microsoft · Windows Http.Sys +1

Name of the Vulnerable Software and Affected Versions: Windows HTTP.sys affected versions not specified Description: The issue is related to insufficient input validation in the HTTP.sys driver of the Windows operating system. It can be exploited by a remote attacker using a specially crafted...

[SECURITY] Fedora 36 Update: xe-guest-utilities-latest-7.30.0-4.fc36

Scripts for monitoring XAPI project virtual machine. Writes distribution version information and IP address to XenStore. This package follows the latest version of xe-guest-utilities upstream...