PT-2022-28129 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...

PT-2022-28125 · Instedd · Instedd Nuntium

Name of the Vulnerable Software and Affected Versions: InSTEDD Nuntium affected versions not specified Description: A problematic issue was found in InSTEDD Nuntium, affecting an unknown function of the file app/controllers/geopoll controller.rb. The manipulation of the signature argument leads t...

PT-2022-26003 · WordPress · Contest Gallery Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue allows malicious users with at least author privilege to leak sensitive information from the...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to the heap-buffer-overflow in the library, allowing an attacker to cause an application crash...

Privilege Escalation

xorg-server, edge is vulnerable to privilege escalation. The vulnerability exists because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed...

Hash Collision

github.com/iofinnet/tss-lib is vulnerable to hash collision attacks. A remote attacker is able to cause hash table collisions through the vulnerable SHA512256 function of common/hash.go file, resulting in attacker gaining unintended privileges...

PT-2022-27623 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: The issue concerns multiple command injection vulnerabilities. These vulnerabilities can be exploited via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function...

PT-2022-28012 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

CVE-2022-25893 Arbitrary Code Execution

The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the WeakMap.prototype.set method. Exploiting this vulnerability leads to access to a host object and a sandbox compromise...

PT-2022-9016 · Unknown · Chedabob Whatismyudid

Name of the Vulnerable Software and Affected Versions: chedabob whatismyudid affected versions not specified Description: A problematic issue has been found in chedabob whatismyudid, affecting the function exports.enrollment of the file routes/mobileconfig.js. This issue leads to cross-site...

PT-2022-27643 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2022-26202 · Unknown · Denshi Nyusatsu Core System

Name of the Vulnerable Software and Affected Versions: DENSHI NYUSATSU CORE SYSTEM versions v6 R4 and earlier Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. Recommendations: For DENSHI NYUSATSU CORE SYSTEM versions v6 R4 and...

PT-2022-11603 · As +1 · As

Name of the Vulnerable Software and Affected Versions: as affected versions not specified Description: A vulnerability was found in the function getFullURL of the file include.cdn.php. The manipulation leads to cross-site scripting. The attack can be initiated remotely. Recommendations: Apply a...

PT-2022-27304 · Micro Focus +1 · Micro Focus Keyview +2

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is related to a stack-based buffer overflow in lasr.dll within Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

PT-2022-27740 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.06.23 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetClientState function. Recommendations: For Tenda AC15 version 15.03.06.23, as a temporary workaround, consider disablin...

PT-2022-25133 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2022-10521 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: Feehi CMS versions 2.1.1 and earlier Description: The issue allows attackers to run arbitrary code via the user name field of the "/login" API endpoint. This is a Cross Site Scripting XSS issue, which means attackers can inject malicious...

PT-2022-25123 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2022-27961 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 Description: The issue allows an app to potentially disclose kernel memory due to inadequate memory handling. This has been addressed with improved memory handling. Recommendations: For...

Improper Authentication

org.keycloak:keycloak-services is vulnerable to improper authentication. The reuse of session IDs across root, user authentication sessions and the lack of root session validation allow remote attackers to resolve a user session attached to the previously authenticated user in the offlineaccess...