PT-2022-37206 · Unknown · Com.Fasterxml.Jackson.Dataformat.Tomcat

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.dataformat.tomcat version affected versions not specified Description: A security exception occurs due to a crash in the com.fasterxml.jackson.dataformat.toml module. The issue is related to the parseInlineTable,...

PT-2022-19840 · Unknown · Fishbowl Inventory

Name of the Vulnerable Software and Affected Versions: Fishbowl Inventory versions prior to 2022.4.1 Description: A Java Deserialization issue allows remote attackers to execute arbitrary code via a crafted XML payload. This affects the Fishbowl Server component. Recommendations: For versions pri...

PT-2022-22922 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the parameter customerCode in CustomerDAO.java. This enables unauthorized access and manipulation of...

PT-2022-20199 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote attacker to inject an arbitrary script via unspecified vectors, exploiting a cross-site scripting vulnerability in specific parameters. Recommendations: For...

PT-2022-12126 · Intel · Intel Connect M Android Application

Name of the Vulnerable Software and Affected Versions: IntelR Connect M Android application versions prior to 1.7.4 Description: The issue concerns incorrect default permissions that may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: Fo...

PT-2022-22919 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in CustomerDAO.java allows attackers to execute arbitrary SQL commands via the searchTxt parameter. This enables unauthorized access and manipulation of databas...

PT-2022-22832 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6b05ce endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

PT-2022-22842 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6e41b8 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

PT-2022-22829 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6b05aa endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

PT-2022-22833 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6e412a endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about...

PT-2022-22824 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A heap-buffer overflow issue was discovered in OTFCC. The issue is related to the /release-x64/otfccdump+0x6b0466 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information...

PT-2022-22485 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes commit 8abf6be Description: A stack overflow issue was discovered in PNGDec. The issue is related to the /linux/main.cpp file. Recommendations: For versions prior to the version that includes...

PT-2022-23287 · Mingsoft · Mingsoft Mcms

Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.8 Description: A SQL injection issue was found in the /mdiy/page/verify URI via the fieldName parameter. This allows for potential exploitation. Recommendations: For Mingsoft MCMS version 5.2.8, avoid using the...

PT-2022-24002 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2022-37184 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type being Heap-buffer-overflow READ 8, and the crash stat...

PT-2022-14502 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to insufficient log filtering in Accounts, allowing sensitive information to be written to the system log. This could lead to local information disclosure, requiring System executi...

PT-2022-15470 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue allows a privileged user to obtain sensitive Azure bot credential information. Recommendations: For versions 21.0.0 through 21.0.2, consider restricting acce...

PT-2022-18321 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System affected versions not specified Description: A critical issue has been found in the system, affecting an unknown functionality of the file /process/aprocess.php. The manipulation of the mailuid argume...

PT-2022-16180 · WordPress · Wsm Downloader

Name of the Vulnerable Software and Affected Versions: WSM Downloader WordPress plugin version 1.4.0 Description: The issue arises from the lack of proper validation of the link parameter, allowing bypass of restrictions on downloading images or files from specific popular websites...

PT-2022-24815 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions prior to 1.0.6 Description: Due to missing canonicalization when readDir is called recursively, it was possible to display directory listings outside of the defined fs scope. This required a crafted symbolic link or junction...