PT-2022-25890 · Tenda · Tenda Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 version US AC6V2.0RTL V15.03.06.51 multi TDE01 Description: A buffer overflow was discovered in the 0x47ce00 function, allowing attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For Tenda AC1200...

PT-2022-26651 · Bentley · Microstation +1

Name of the Vulnerable Software and Affected Versions: MicroStation versions prior to 10.17.01.58 Bentley View versions prior to 10.17.01.19 Description: The issue is related to out-of-bounds read problems that occur when opening specially crafted FBX files. This could potentially lead to...

PT-2022-8846 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

CVE-2022-32174 Gogs - XSS

In Gogs, versions v0.6.5 through v0.12.10 are vulnerable to Stored Cross-Site Scripting XSS that leads to an account takeover...

XAPI open file limit DoS

ISSUE DESCRIPTION It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other trusted clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors...

PT-2022-24021

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 Description A Regular expression denial of service ReDoS flaw was found in the interpolateName function in interpolateName.js via the resourcePath variable. This issue could be exploited by sending crafted...

PT-2022-26216 · Pypi · D8S-Algorithms +1

Name of the Vulnerable Software and Affected Versions: d8s-algorithms version 0.1.0 Description: The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. Recommendations: Fo...

PT-2022-26319 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue allows for SQL Injection via the "/csms/admin/?page=user/manage user&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthoriz...

PT-2022-25847 · Unknown · Online Pet Shop We App

Name of the Vulnerable Software and Affected Versions: Online Pet Shop We App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=orders/view order" API endpoint. Recommendations: For Online...

PT-2022-37358 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-csv package, which was inserted by a third party. Recommendations:...

PT-2022-26214 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. Recommendations:...

Authorization Bypass

modsecurity-crs:sid is vulnerable to authorization bypass. The vulnerability exists due to an HTTP accept header field , allowing an attacker to do a response body bypass by accessing to restricted resources...

PT-2022-25981 · Hashicorp +1 · Hashicorp Nomad +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Nomad and Nomad Enterprise versions 1.0.2 through 1.2.12 HashiCorp Nomad and Nomad Enterprise version 1.3.5 Description: The issue allows jobs submitted with an artifact stanza using invalid S3 or GCS URLs to crash client agents...

PT-2022-34847 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.146 Description: The issue is related to a possible bogus match in the nf osf find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-21893 · Hancom · Hancom Office 2020

Name of the Vulnerable Software and Affected Versions: Hancom Office 2020 version 11.0.0.5357 Description: A buffer underflow issue exists in the way Hword of Hancom Office 2020 parses XML-based office files. This can be triggered by a specially-crafted malformed file, causing memory corruption b...

PT-2022-25045 · Facm · Facm

Name of the Vulnerable Software and Affected Versions: FACM application versions prior to SMR Oct-2022 Release 1 Description: The issue is related to improper access control in the FACM application, allowing a local attacker to connect arbitrary AP and Bluetooth devices. Recommendations: For...

GO-2022-1039 Memory exhaustion when compiling regular expressions in regexp/syntax

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

PT-2022-17731 · Beckman Coulter · Remisol Advance

Name of the Vulnerable Software and Affected Versions: Beckman Coulter Remisol Advance versions 2.0.12.1 and prior Description: The default privileges for the running service Normand Remisol Advance Launcher allow non-privileged users to overwrite and manipulate executables and libraries, enablin...

PT-2022-17733 · Beckman Coulter · Remisol Advance

Name of the Vulnerable Software and Affected Versions: Beckman Coulter Remisol Advance versions 2.0.12.1 and prior Description: The default privileges for the running service Normand Service Manager allow non-privileged users to overwrite and manipulate executables and libraries, enabling attacke...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc in eager mode...