454 matches found
PT-2022-5248 · Microsoft · Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Microsoft DWM Core Library affected versions not specified Description: The issue is related to insecure privilege management in the Windows DWM library, which can be exploited to elevate privileges. This allows an attacker to affect the...
PT-2022-5755 · Microsoft +1 · Visual Studio Code +1
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in Visual Studio Code, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment...
PT-2022-5396 · Exiv2 +1 · Exiv2 +1
Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to an integer overflow in the QuickTimeVideo::userDataDecoder function of the quicktimevideo.cpp file in the QuickTime Video Handler component. This can be exploited...
PT-2022-26429 · Centreon · Centreon
Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the contact groups...
PT-2022-17886 · Vdec Fmt · Vdec Fmt
Name of the Vulnerable Software and Affected Versions: vdec fmt affected versions not specified Description: The issue is related to a possible use after free due to improper locking in vdec fmt. This could lead to local escalation of privilege, with System execution privileges needed. User...
PT-2022-18578 · Unknown · Octopus Deploy
Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows bypassing rate limiting on login using null bytes. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2022-4967 · Microsoft · Office Visio
Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to a memory buffer overflow when parsing EMF files, which can allow an attacker to execute arbitrary code by opening a specially crafted file...
PT-2022-5743 · Microsoft · Odbc Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. It allows a remote attacker to execute arbitrary code,...
PT-2022-5779 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call RPC runtime environment of Microsoft Windows operating systems. This can be exploited by a remot...
PT-2022-20607 · Sourcecodester · Sourcecodester Clinics Patient Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System affected versions not specified Description: A critical issue was found in the Login component of the system, specifically in the file index.php. The user name argument is vulnerable to sql...
PT-2022-4938 · Isc +11 · Bind +11
Name of the Vulnerable Software and Affected Versions: BIND versions affected versions not specified Description: The issue is related to a flaw in the resolver code of the DNS server, which can be exploited by flooding the target resolver with queries, significantly impairing its performance and...
PT-2022-14873 · Intel · Intel Proset/Wireless Wifi +1
Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi and KillerTM WiFi products affected versions not specified Description: The issue is related to improper access control, which may allow a privileged user to potentially enable information disclosure via local...
PT-2022-18556 · Sourcecodester · Sourcecodester Loan Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System affected versions not specified Description: A critical issue affects some unknown functionality of the file /index.php. The manipulation of the password argument leads to SQL injection. The attack can be...
PT-2022-4201 · Microsoft · Azure Rtos Guix Studio
Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure RTOS GUIX Studio development environment. This can allow a remote attacker to execute arbitrary code...
PT-2022-4120 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to insufficient access restrictions in Windows Defender, which is part of the Windows operating system. This can allow an attacker to elevate their privileges...
PT-2022-4561 · Microsoft · Windows Print Spooler +1
Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the...
PT-2022-6160 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerabilit...
PT-2022-3716 · Microsoft · Windows Print Spooler +1
Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system...
PT-2022-11134 · Huawei · Emui +2
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns the incorrect use of pointers during data transmission in the video framework, which may impact confidentiality upon successful exploitation. Recommendations: At the...
PT-2022-11135 · Unknown · Bluetooth Module
Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The issue is related to improper permission control in the Bluetooth module. Successful exploitation of this issue will affect integrity. Recommendations: At the moment, there is n...