PT-2022-19960 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue concerns SQL Injection via the /insurance/editPayment.php endpoint, specifically through the recipt no parameter. This allows for potential manipulation of database queries...

PT-2022-19303 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version V5.3c.7159 B20190425 Description: A command injection issue was discovered via the ipdoamin parameter in the "/setting/setDiagnosisCfg" API endpoint. Recommendations: For TOTOLink N600R version V5.3c.7159 B20190425, as ...

PT-2022-19309 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: A command injection issue was discovered via the admuser and admpass parameters in the "/goform/setSysAdm" API endpoint. Recommendations: For D-Link DIR-816 A2 version 1.10CNB04, as a temporary...

PT-2022-11472

Name of the Vulnerable Software and Affected Versions Artica Proxy version 4.30.000000 Description A OS Command Injection issue was discovered, allowing attackers to execute OS commands in cyrus.events.php using the GET param logs and the POST param rp. Recommendations For Artica Proxy version...

PT-2022-18716 · Tesla · Tesla Vehicles

Name of the Vulnerable Software and Affected Versions: Tesla vehicles through 2022-03-26 Description: The issue allows attackers to open the charging port of certain Tesla vehicles via a 315 MHz RF signal containing a fixed sequence of approximately one hundred symbols. It is noted that the...

PT-2022-13468 · Pypi · Pytorch-Lightning

Name of the Vulnerable Software and Affected Versions: PyTorch Lightning versions prior to 1.6.0 Description: The issue allows for code injection, potentially enabling an attacker to execute commands on the target operating system. This can be achieved by setting the PL TRAINER GPUS variable when...

PT-2022-15348 · Ibm · Ibm Planning Analytics

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics version 2.0 Description: The issue allows for a Remote File Include RFI attack, where user input could be passed into file include commands, and the web application could be tricked into including remote files with...

PT-2022-12281 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript versions 3.0.0 and below Description: A stack overflow issue was discovered in Jerryscript via the ecma find named property function in ecma-helpers.c. Recommendations: For Jerryscript versions 3.0.0 and below, consider restrictin...

PT-2022-11489

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 22.1.11017.1 Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It is related to a preview function in M-Files Server products that allows making queries from the server with certa...

PT-2022-6514

Name of the Vulnerable Software and Affected Versions Arm Mali GPU Kernel Driver versions r26p0 through r31p0 Arm Mali GPU Kernel Driver versions r0p0 through r35p0 Arm Mali GPU Kernel Driver versions r19p0 through r35p0 Description The Arm Mali GPU Kernel Driver has a vulnerability related to...

PT-2022-10054 · Mcafee · Mcafee Application/Change Control

Name of the Vulnerable Software and Affected Versions: McAfee Application and Change Control MACC versions prior to 8.3.4 Description: A security issue allows a locally logged-in attacker to bypass application protection, enabling them to run applications that would normally be blocked. The...

PT-2021-22448 · Frontier +3 · Frontier +3

Name of the Vulnerable Software and Affected Versions: Frontier versions prior to commit 0b962f218f0cdd796dadfe26c3f09e68f7861b26 Description: A bug in pallet-ethereum can cause invalid transactions to be included in the Ethereum block state due to not validating the input data size. Any invalid...

PT-2021-5951 · Apache · Apache Kylin

Name of the Vulnerable Software and Affected Versions: Apache Kylin 2 versions 2.6.6 and prior Apache Kylin 3 versions 3.1.2 and prior Description: The issue is related to the MySQL JDBC driver in Apache Kylin, which can allow an attacker to execute arbitrary code from a malicious MySQL server...

PT-2021-15264 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace App for Windows versions prior to 2105 Citrix Workspace App for Windows 1912 LTSR prior to CU4 Description: An improper access control issue potentially allows privilege escalation. Recommendations: For versions prior to 2105...

PT-2021-9436 · Nitrokey · Nitrokey Fido U2F

Name of the Vulnerable Software and Affected Versions: Nitrokey FIDO U2F firmware versions through 1.1 Description: An issue in the communication between the microcontroller and the secure element allows an adversary to eavesdrop and derive secrets stored in the microcontroller, enabling arbitrar...

PT-2021-18357 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier Description: A specially crafted TFLite model could...

PT-2021-18356 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issue. An...

PT-2021-17899 · Pillow +9 · Pillow +9

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.2.0 Description: An issue was discovered in Pillow where the BlpImagePlugin did not properly check that reads, after jumping to file offsets, returned data for BLP data. This could lead to a denial of service DoS...

PT-2021-20151 · Gnome +2 · Gnome Evolution +2

Name of the Vulnerable Software and Affected Versions: GNOME Evolution versions 3.38.3 and earlier Description: The issue arises when GNOME Evolution produces a "Valid signature" message for an unknown identifier on a previously trusted key. This occurs because Evolution does not retrieve enough...

PT-2021-1765 · Cisco · Cisco Webex Meetings Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings and Cisco Webex Meetings Server affected versions not specified Description: The issue is related to a lack of protection against brute forcing of the host key in the reclaim host role feature. This could allow a remote...