PT-2022-4531 · Xen +5 · Xen +5

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Xen hypervisor's paravirtualization PV mode implementation. This can be exploited to cause a denial of service...

PT-2022-6343 · Microsoft · 365 Apps +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information using a specially...

PT-2022-10389 · Qualcomm · Snapdragon Compute +6

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2022-1671

Name of the Vulnerable Software and Affected Versions VP9 Video Extensions affected versions not specified Description The issue is related to incorrect code generation management in the VP9 Video Extensions package, which can lead to remote code execution. This could allow an attacker to execute...

PT-2022-1701 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Office. This vulnerability can be exploited to reveal protected information. There is no information...

PT-2022-1544 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2022-1719 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, affecting the system. No information is...

PT-2022-1541 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2022-1666 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...

PT-2022-1709 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a deserialization mechanism flaw in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code by exploiting this...

PT-2022-1977 · Microsoft · Windows Cd-Rom Driver +1

Name of the Vulnerable Software and Affected Versions: Windows CD-ROM Driver affected versions not specified Description: The issue is related to unsafe privilege management in the Windows CD-ROM Driver, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2022-1981 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a spoofing vulnerability that allows attackers to conduct a spoofing attack and disclose protected information. This can be exploited by a remote...

PT-2022-2697

Name of the Vulnerable Software and Affected Versions cURL affected versions not specified Description The issue is related to the implementation of the HSTS HTTP Strict Transport Security mechanism in the cURL utility. It could be bypassed if the hostname in the given URL used a trailing dot whi...

PT-2022-12212 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The issue is related to an embedded web server input sanitization vulnerability in Lexmark devices, which can lead to remote code execution on the device. Recommendations: At the...

PT-2022-12213 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The issue is related to an embedded web server command injection vulnerability. This vulnerability was identified in Lexmark devices through 2021-12-07. There is no information...

PT-2022-15762 · Western Digital · Western Digital My Cloud

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Devices affected versions not specified Description: A command injection remote code execution issue was discovered that could allow an attacker to execute arbitrary system commands on the device. The issue was...

PT-2022-13058

Name of the Vulnerable Software and Affected Versions corenlp affected versions not specified Description The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents...

PT-2022-11465

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Business Logic Errors. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

PT-2022-1951 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Raw Image Extension plugin. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2022-13015 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe-it affected versions not specified Description: The issue is related to Missing Authorization and Improper Access Control, which may allow unauthorized access. There is no information provided about the estimated number of potentially...