PT-2022-21836 · Baseband · Baseband

Name of the Vulnerable Software and Affected Versions: baseband versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper input validation in the baseband, which can be exploited to cause an integer overflow leading to a heap overflow. Recommendations: For versions...

PT-2022-21848 · Unknown · Desktopsystemui

Name of the Vulnerable Software and Affected Versions: DesktopSystemUI versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper access control, allowing attackers to enable and disable arbitrary components. Recommendations: For versions prior to SMR Aug-2022 Release ...

PT-2022-21838 · Samsung · Dex For Pc

Name of the Vulnerable Software and Affected Versions: DeX for PC versions prior to SMR Aug-2022 Release 1 Description: A vulnerability using PendingIntent in DeX for PC allows attackers to access files with system privilege. Recommendations: For DeX for PC versions prior to SMR Aug-2022 Release ...

PT-2022-18084 · Sourcecodester · Sourcecodester Interview Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Interview Management System version 1.0 Description: A critical issue affects the processing of the file /viewReport.php, where the manipulation of the id argument with a specific input leads to SQL injection. The attack can be...

PT-2022-18093 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A problematic issue has been found, affecting the /manage-apartment.php file. The manipulation of the Apartment Number argument with the input alert1 leads to...

PT-2022-22395 · F5 · Big-Iq Centralized Management +1

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x before 14.1.5.1 BIG-IP versions 15.1.x before 15.1.6.1 BIG-IP versions 16.1.x before 16.1.3.1 BIG-IP versions 17.0.x before 17.0.0.1 BIG-IQ Centralized Management versions 8.x Description: An...

PT-2022-19841 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE Systems Management Appliance SMA versions prior to 12.0 Description: A SQL injection issue exists that can allow for remote code execution via the "download agent installer.php" endpoint. Recommendations: For versions prior to 12.0...

PT-2022-37153 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several function calls, including pdfi free object, pdfi free font cidtype2, and...

PT-2022-37154 · Git +1 · Libaom

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 1 crash type. The crash state involves functions such as av1 read mode info, parse decode block, and...

PT-2022-20600 · Dspace · Dspace

Name of the Vulnerable Software and Affected Versions: DSpace versions prior to 5.11 DSpace versions prior to 6.4 Description: The JSPUI spellcheck "Did you mean" HTML escapes the data-spell attribute in the link, but not the actual displayed text. Similarly, the JSPUI autocomplete HTML does not...

PT-2022-17779 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 7.0NG.760 and below Description: The issue allows an improper authorization in User Management, where any authenticated user with access to the User Management module could create, modify, or delete any user with full adm...

Denial Of Service (DoS)

firefox is vulnerable to remote code execution. The vulnerability exists due to a memory corruption allowing an attacker to inject maliciously crafted code into the system...

PT-2022-17517 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Garage Management System version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /php action/createUser.php. The manipulation of the userName argument with a specific...

PT-2022-4063 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.5-2 Description: The issue is related to incorrect link resolution before accessing a file, which may allow an attacker to overwrite arbitrary files. On MacOS and Linux, it may be possible to perform a symli...

PT-2022-22993 · WordPress · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider plugin versions 1.9.5 and earlier GS Testimonial Slider plugin versions 1.9.1 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be...

PT-2022-20244 · Booked · Booked

Name of the Vulnerable Software and Affected Versions: Booked versions prior to 3.3 Description: The issue allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having the user access a specially crafted URL. Recommendations: For...

PT-2022-10247 · Lrzip +1 · Lrzip +1

Name of the Vulnerable Software and Affected Versions: lrzip version 0.641 Description: An issue was discovered in the fill buffer function in stream.c, which results in memory leaks. Recommendations: For lrzip version 0.641, consider updating to a newer version that addresses the memory leak iss...

PT-2022-22686 · Ibm · Ibm Security Verify Information Queue

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue version 10.0.2 Description: The issue could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. Recommendations: For IBM Security Verify Information Queu...

PT-2022-23374 · Obsidian · Obsidian

Name of the Vulnerable Software and Affected Versions: Obsidian versions 0.14.x through 0.15.4 Description: The issue allows remote code execution due to the use of window.open without checking the URL, specifically with the obsidian://hook-get-address protocol. This can lead to unauthorized code...

PT-2022-21527 · Apple · Security Update +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 watchOS versions prior to 8.7...