PT-2022-19251 · Carlo Gavazzi · Carlo Gavazzi Uwp3.0

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi UWP3.0 affected versions not specified CPY Car Park Server version 2.8.3 Description: A remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands...

PT-2022-37301 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a crash in the perfetto trace processor. The crash occurs in the TrackEventParser::ParseTrackDescriptor function, which is called by TrackEventModule::ParsePacket a...

PT-2022-4861 · Uclibc-Ng +2 · Uclibc-Ng +3

Name of the Vulnerable Software and Affected Versions: libpthread, linuxthreads, uClibC, and uClibC-ng affected versions not specified Description: The issue is related to a potential memory corruption in the al cpLocation function of the libpthread and linuxthreads libraries in uClibC and...

PT-2022-24623 · Pbc · Pbc

Name of the Vulnerable Software and Affected Versions: PBC through 2022-8-27 Description: A SEGV issue was detected in the function pbc wmessage integer in src/wmessage.c:137. This issue affects PBC. Recommendations: For PBC through 2022-8-27, as a temporary workaround, consider disabling the pbc...

PT-2022-37298 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as "Use-after-poison READ 1". The crash state includes references to rx ip, mip rx, and a file named...

PT-2022-25467 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2022-21434 · Unknown · Ikus060/Minarca

Name of the Vulnerable Software and Affected Versions: ikus060/minarca versions prior to 4.2.2 Description: The issue concerns weak password requirements in the GitHub repository ikus060/minarca. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

PT-2022-22511 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC via the /release-x64/otfccdump+0x703969 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the /release-x64/otfccdump+0x703969...

PT-2022-37293 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash state includes Ins PUSHW, RunIns, and Instance Reset. Recommendations: At the moment,...

Server-Side Request Forgery

seo-by-rank-math is vulnerable to server-side request forgery. The vulnerability exists in the archiveredirect function in class-frontend.php because it doesn't properly validate urls which allows a remote attacker to cause an ssrf bypass via a crafted url...

PT-2022-21349 · Minarca · Minarca

Name of the Vulnerable Software and Affected Versions: minarca versions prior to 4.2.2 Description: The issue concerns a sensitive cookie in an HTTPS session that lacks the 'Secure' attribute. This problem is identified in the GitHub repository ikus060/minarca. Recommendations: For versions prior...

PT-2022-16359 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: The issue allows unsanitized UUIDs to be passed by a rogue agent, leading to log spoofing on the verifier and registrar. Recommendations: For versions prior to 6.3.0, update to version 6.3.0 or lat...

PT-2022-5132 · Arr-Pm · Arr-Pm

Name of the Vulnerable Software and Affected Versions: Arr-pm versions prior to 0.0.12 Description: The issue is related to OS command injection, which can result in shell execution if an RPM contains a malicious payload compressor field. This impacts the extract and files methods of the RPM::Fil...

Denial Of Service (DoS)

tensorflow is vulnerable for denial of service. The vulnerability exists because ComputeOpKernelContext context function in maxpoolingop.cc allows the attacker to make the gpu kernel give a check fail that can be used to trigger a denial of service attack by sending a window size input array with...

PT-2022-37378 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a...

PT-2022-24449 · Valine · Valine

Name of the Vulnerable Software and Affected Versions: Valine version 1.4.18 Description: The issue allows attackers to execute arbitrary code via a crafted POST request, enabling remote code execution RCE. This can be achieved by sending a specifically designed request to the affected system...

PT-2022-25547 · Pypi · D8S-Dates +1

Name of the Vulnerable Software and Affected Versions: d8s-dates version 0.1.0 Description: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. Recommendations: For version...

PT-2022-25186 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can occur via the /bin/httpd, specifically in the function: setSmartPowerManagement. Recommendations: For Tenda AC21 version 16.03.08.15, consider...

PT-2022-25380 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-pdfs version 0.1.0 Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

PT-2022-25189 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability. It can be exploited via the /bin/httpd endpoint, specifically through the form fast setting wifi set parameter. Recommendations: For Tenda AC...