NEC Expresscluster X 安全漏洞

NEC Expresscluster X is a specialized high availability cluster software from Nippon Electric NEC. It is used to enable fast restore functions and continuously protect critical applications and data. A security vulnerability exists in NEC Expresscluster X 5.0 for Windows and prior versions,...

PT-2022-5288 · Kaspersky · Kavremover +1

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security affected versions not specified Kavremover affected versions not specified Description: The issue is related to an uncontrolled search path element in the installation file of Kaspersky Endpoint Security and the...

CVE-2022-2882

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integration's access token by modifying the...

PT-2022-24829 · Tuleap +1 · Tuleap +1

Name of the Vulnerable Software and Affected Versions: Tuleap versions 12.9.99.228 through 14.0.99.23 Description: The issue concerns improper verification of authorizations when updating the branch prefix used by the GitLab repository integration. Authenticated users can change the branch prefix...

PT-2022-6803 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: An information disclosure issue exists in the OpenImageIO::decode iptc iim functionality. This is related to reading beyond the valid boundaries of a data buffer. A specially-crafted TIFF file can lea...

PT-2022-20196 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to the fixed version Description: The issue is related to improper control of a resource identifier in Error Tracking, allowing an authenticated attacker to generate content that could cause a victim to make...

CVE-2022-3066

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an unauthorised user to create issues in a project...

PT-2022-22553 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow issue was discovered in SWFTools via the png read header function at /src/png2swf.c. Recommendations: At the moment, there is no information about a newer version th...

PT-2022-34718 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to an infinite loop in the dax iomap rw function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-24534 · Asus · Armoury Crate Service

Name of the Vulnerable Software and Affected Versions: Armoury Crate Service affected versions not specified Description: The issue concerns Armoury Crate Service's logging function, which lacks sufficient validation to check if the log file is a symbolic link. This allows a physical attacker wit...

PT-2022-22566 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the FoFiTrueType::writeTTF function at /xpdf/FoFiTrueType.cc. Recommendations: At the moment, there is no information about a newer...

PT-2022-6462 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the ESR-20 service router's firmware. Exploitation of this issue may allow an attacker to cause a denial of service...

PT-2022-25143 · Owasp +1 · Owasp Modsecurity Core Rule Set +1

Name of the Vulnerable Software and Affected Versions: OWASP ModSecurity Core Rule Set CRS versions 3.0.x through 3.3.2 Description: The issue concerns a partial rule set bypass for HTTP multipart requests. This occurs when a payload uses a character encoding scheme via the Content-Type or the...

PT-2022-34433 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to a platform-device leak in the error path of the x86/pmem component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.140 Description: The issue is related to use-after-free bugs caused by pn532 cmd timeout in the pn533 NFC component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A potential issue exists due to a data race. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.3 and is fixed in Linux Kernel...

PT-2022-33327 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.16 through v5.19.5 Description: A security issue related to mm/gup and FOLL FORCE COW has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33276 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.5 Description: The issue is related to the Arm Cortex-A76 and concerns the match list for erratum 1286807. It was introduced in version v5.18 and fixed in version v5.19.6. The actual impact and attack...

PT-2022-33354 · Habana · Habanalabs/Gaudi

Name of the Vulnerable Software and Affected Versions: habanalabs/gaudi versions prior to v5.19.4 Description: The issue is related to a shift out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations: For habanalabs/gaudi versions prior to v5.19.4, update...

PT-2022-33457 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.19.1 Description: The issue is related to a problem in the Linux Kernel where a task is not properly requeued on a CPU excluded from cpus mask. The actual impact and attack plausibility have not yet been...