PT-2022-4266 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bluetooth Driver, which can be exploited to elevate privileges. This can allow an attacker to affect the...

PT-2022-4113 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, allowing a remote attacker to elevate their privileges. This can impact the system,...

PT-2022-4161 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no...

PT-2022-6595 · Php +5 · Php +5

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Description: A heap buffer overflow issue was discovered in PHP. This occurs when the PHP CLI SERVER WORKERS environment variable is set to a large value. The vulnerability is related to the php cli server...

PT-2022-3715 · Microsoft · Windows Performance Counters +1

Name of the Vulnerable Software and Affected Versions: Windows Performance Counters affected versions not specified Description: The issue is related to insufficient access restrictions in Windows Performance Counters, allowing an attacker to elevate their privileges. This can affect the system,...

PT-2022-3799 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restriction in the Azure Site Recovery tool for VMWare to Azure, which can be exploited by a remote attacker to elevate privileges an...

PT-2022-14955 · Advantech · Advantech Iview

Name of the Vulnerable Software and Affected Versions: Advantech iView affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. There are two instances of this issue. No information is provided about the...

PT-2022-3288 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Edge. It allows a remote attacker to exploit the vulnerability and elevate their privileges...

PT-2022-18865 · Hikvision · Hikvision Hybrid San/Cluster Storage

Name of the Vulnerable Software and Affected Versions: Hikvision Hybrid SAN/Cluster Storage products affected versions not specified Description: The issue is related to insufficient input validation in the web module of certain Hikvision Hybrid SAN/Cluster Storage products. This allows an attack...

PT-2022-4882 · Qualcomm · Snapdragon +1

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to a component in the audio microcode of Qualcomm's embedded platforms, which lacks buffer length checks and is vulnerable to out-of-bounds...

PT-2025-32441

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Bluetooth implementation of the Linux kernel where the strlen function is used with hdev-dev name,short name which are not guaranteed to be NULL terminated. This...

PT-2022-2450 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Remote Access Connection Manager service, which can be exploited to elevate...

PT-2022-3818 · Cisco · Cisco Iox +1

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to incorrect restriction of the directory path name with limited access. An attacker could inject arbitrary commands into the underlying host operating system, execut...

PT-2022-2642 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, which can be exploited by remote attackers to execute arbitrary code on the syste...

PT-2022-2890 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access control in Visual Studio Code, allowing an attacker to potentially elevate their privileges. Recommendations: At the moment, there is ...

PT-2022-2665 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics 365. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2022-2939 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-2869 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volume CSV affected versions not specified Description: The issue is related to insufficient input validation in the Windows Cluster Shared Volume CSV file system, which can be exploited to cause a denial of service. Th...

PT-2022-2598 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in Microsoft Windows, specifically due to insufficient input validation. This allows a remote...

PT-2022-2662 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Telephony Service of Windows operating systems. It allows an attacker to elevate their privileges. Thi...