PT-2022-5773 · Ami · Megarac

Name of the Vulnerable Software and Affected Versions: MegaRAC affected versions not specified Description: The issue is related to errors in code generation in the AMI MegaRAC Redfish API interface, which can be exploited by a remote attacker to execute arbitrary code by sending a specially...

PT-2022-26589 · Dot Tech · Dot Tech Smart Campus System

Name of the Vulnerable Software and Affected Versions: Dot Tech Smart Campus System affected versions not specified Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /services/Card/findUser. This leads to information disclosure and can...

PT-2022-27533 · Telepad · Telepad

Name of the Vulnerable Software and Affected Versions: Telepad affected versions not specified Description: The issue allows remote unauthenticated users to send instructions to the server, enabling the execution of arbitrary code without prior authorization or authentication. Recommendations: At...

PT-2022-25685 · Unknown · Ondiskplayeragent

Name of the Vulnerable Software and Affected Versions: OndiskPlayerAgent affected versions not specified Description: The issue is related to a remote code execution vulnerability due to insufficient verification of URLs in OndiskPlayerAgent. A remote attacker could exploit this to cause remote...

PT-2022-25687 · Eyoom Co. +1 · Eyoom Builder

Name of the Vulnerable Software and Affected Versions: Builder program affected versions not specified Description: The issue allows for remote code execution by utilizing cookie values as paths to a file. This can be exploited by a remote attacker to execute or inject malicious code...

PT-2022-36783 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the checkRowIsInitialized and checkMemIsInitialized functions of the RawImageData class,...

PT-2023-22487 · Unknown +4 · Llvm-Project +4

Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: The issue is related to a segmentation fault in the llvm-project, specifically via the component mlir::Type::getDialect. There is no information provided about the estimated number of...

PT-2022-36778 · Unknown · Libarchive

Name of the Vulnerable Software and Affected Versions: libarchive affected versions not specified Description: The issue is related to a heap-buffer-overflow read crash. It occurs in the archive read has encrypted entries function. Recommendations: At the moment, there is no information about a...

PT-2022-10912 · Hewlett Packard · Digital Sending Products +1

Name of the Vulnerable Software and Affected Versions: HP Print products and Digital Sending products affected versions not specified Description: The issue concerns potential remote code execution and buffer overflow in certain HP products. This is related to the use of Link-Local Multicast Name...

PT-2022-23623 · Elfsight · Elsight Halo

Name of the Vulnerable Software and Affected Versions: Elsight Halo affected versions not specified Description: The Elsight Halo web panel allows connection validation through a POST request to /api/v1/nics/wifi/wlan0/ping, which can be exploited by abusing the DESTINATION parameter to achieve...

PT-2022-16427

Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to modify logs due to an unauthenticated access vulnerability. Recommendations At the moment, there is no informatio...

PT-2022-10199 · Intel · Intel System Studio

Name of the Vulnerable Software and Affected Versions: IntelR System Studio affected versions not specified Description: The issue is related to an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2022-10355 · Wago · Wago I/O-Check Service

Name of the Vulnerable Software and Affected Versions: WAGO I/O-Check Service affected versions not specified Description: The issue allows an unauthenticated remote attacker to send a specially crafted packet containing OS commands, which can provoke a denial of service. Recommendations: At the...

PT-2022-18565 · Amd · Amd Μprof

Name of the Vulnerable Software and Affected Versions: AMD μProf affected versions not specified Description: The issue is related to insufficient validation in the IOCTL input/output buffer, which may allow an attacker to bypass bounds checks. This could potentially lead to a Windows kernel cras...

PT-2022-5456 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can lead to a denial-of-service condition. This could allow an...

PT-2022-5509 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue exists due to insufficient input validation in Microsoft Visual Studio, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At th...

PT-2022-5659 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Advanced Local Procedure Call ALPC handler. This can allow an attacker to elevate their...

PT-2022-37529 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt affected versions not specified Description: The issue concerns recent security updates in the base containers of the kubevirt stack. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

PT-2022-5446 · Microsoft · Windows Overlay Filter +1

Name of the Vulnerable Software and Affected Versions: Windows Overlay Filter affected versions not specified Description: The issue is related to insufficient access control in the Windows Overlay Filter component, allowing an attacker to elevate their privileges. This can impact the system,...

PT-2022-24506 · Elastic +1 · Elasticsearch +1

Name of the Vulnerable Software and Affected Versions: HCL Commerce affected versions not specified Description: The issue allows a remote attacker to cause a denial of service attack on the site and make administrative changes when HCL Commerce is used with Elasticsearch. Recommendations: At the...