PT-2022-33646 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A potential issue exists in the ieee80211 scan rx function, which may be related to a use-after-free UAF error. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-33568 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.19.1 Description: The issue concerns a simplification problem in the devm spi register controller function. It was introduced in version v5.13 and fixed in version v5.19.2. The actual impact and attack...

PT-2022-37268 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE, with a crash state involving from8to16, cmsHandleExtraChannels, and CachedXFORM. No information is...

PT-2022-23675 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 5.0.63 for KR and 5.1.47 for Global Description: The issue allows attackers to access files without permission via implicit Intent, exploiting a Pending Intent hijacking vulnerability in NotiCenterUtils...

PT-2022-21726 · WordPress · Wpdevelop/Oplugins Booking Calendar

Name of the Vulnerable Software and Affected Versions: WPdevelop/Oplugins Booking Calendar plugin versions prior to 9.2.1 Description: A Cross-Site Request Forgery CSRF issue exists, allowing unauthorized actions related to Translations Update. Recommendations: For WPdevelop/Oplugins Booking...

PT-2022-10518 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was initially considered but further investigation showed it was not a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no...

PT-2022-8072 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was initially considered but further investigation showed it was not a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no...

PT-2022-23320 · Justsystems · Atok +12

Name of the Vulnerable Software and Affected Versions: JustSystems JUST Online Update for J-License versions affected versions not specified Description: An unquoted search path issue exists in the JustSystems JUST Online Update for J-License, which is bundled with various products, including...

PT-2022-4459

Name of the Vulnerable Software and Affected Versions zlib versions 1.2.12 and earlier MySQL Server versions 5.7.41 and earlier, 8.0.31 and earlier Description The issue is related to a heap-based buffer over-read or buffer overflow in the inflate function of the zlib library, specifically in the...

PT-2022-21934 · Ibm · Ibm Cics Tx

Name of the Vulnerable Software and Affected Versions: IBM CICS TX version 11.1 Description: The issue allows an attacker with physical access to the system to execute code using a back and refresh attack. Recommendations: For IBM CICS TX version 11.1, at the moment, there is no information about...

PT-2022-15364 · Ibm · Ibm Datapower Gateway

Name of the Vulnerable Software and Affected Versions: IBM Datapower Gateway versions 10.0.1.0 through 10.0.1.5 IBM Datapower Gateway versions 10.0.2.0 through 10.0.4.0 IBM Datapower Gateway versions 2018.4.1.0 through 2018.4.1.18 Description: The issue is related to insufficient authorization...

PT-2022-9259 · Ovarro · Ovarro Tbox Twinsoft

Name of the Vulnerable Software and Affected Versions: Ovarro TBox TWinSoft affected versions not specified Description: The issue concerns the use of a custom hardcoded user TWinSoft with a hardcoded key in Ovarro TBox TWinSoft. Recommendations: At the moment, there is no information about a new...

PT-2022-21512 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 macOS Catalina versions prior to Security Update 2022-005 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: A logic issue was addressed with improved stat...

PT-2025-25900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the HID Nintendo module. The problem occurs when trying to queue work to a destroyed workqueue,...

CVE-2019-25064 CoreHR Core Portal cross-site request forgery

A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. Upgrading to version 27.0.8 is able to address this issue. It i...

GHSA-PGG9-MMCG-8MXP MantisBT Incorrect Authorization in bug_actiongroup_page.php

An issue was discovered in MantisBT before 2.24.4. Due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can get access to the Summary fields of private Issues via bugarr= in a crafted bugactiongrouppage.php URL. The target Issues can have Private view statu...

PT-2022-10570 · WordPress · Mc4Wp

Name of the Vulnerable Software and Affected Versions: MC4WP plugin versions = 4.8.6 Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. It affects users with admin or higher roles. There is no information provided about the estimated number of potentially...

GHSA-HVMJ-356C-GPF4 Salt allows deleted minions to read or write to minions with the same id

Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching...

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A competitive conditions iss...

Microsoft Windows User Profile Service 竞争条件问题漏洞

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A competitive conditions issue vulnerability exists in Microsoft Windows User Profile Service. The...